# Flog Txt Version 1 # Analyzer Version: 3.1.2 # Analyzer Build Date: Oct 28 2019 11:51:53 # Log Creation Date: 05.01.2020 02:59:11.827 Process: id = "1" image_name = "ywb3frg1.exe" filename = "c:\\users\\fd1hvy\\desktop\\ywb3frg1.exe" page_root = "0x3e911000" os_pid = "0xec0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xff8 [0038.416] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0038.768] GetVersionExW (in: lpVersionInformation=0xa85fa8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xa85fa8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0038.768] GetLastError () returned 0x0 [0038.769] GetVersionExW (in: lpVersionInformation=0xa85fa8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xa85fa8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0038.769] GetLastError () returned 0x0 [0038.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x75e708, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0038.776] GetLastError () returned 0x0 [0038.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", nBufferLength=0x105, lpBuffer=0x75e770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", lpFilePart=0x0) returned 0x24 [0038.937] GetLastError () returned 0x2 [0038.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", nBufferLength=0x105, lpBuffer=0x75e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", lpFilePart=0x0) returned 0x24 [0038.942] GetLastError () returned 0x2 [0038.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x75e6d4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0038.945] GetLastError () returned 0x2 [0038.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x75e770, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0038.950] GetLastError () returned 0x2 [0038.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\", nBufferLength=0x105, lpBuffer=0x75e70c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\", lpFilePart=0x0) returned 0x18 [0038.950] GetLastError () returned 0x2 [0039.937] GetVersionExW (in: lpVersionInformation=0xa89788*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xa89788*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0039.937] GetLastError () returned 0x0 [0040.245] CAddrControl::AddRef () returned 0x1 [0041.033] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x75e90000 [0041.036] GetLastError () returned 0x8013141b [0041.040] GetProcAddress (hModule=0x75e90000, lpProcName="IsDebuggerPresent") returned 0x75ea5930 [0041.044] IsDebuggerPresent () returned 0 [0041.046] GetCurrentProcessId () returned 0xec0 [0041.049] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xec0) returned 0x318 [0041.055] GetProcAddress (hModule=0x75e90000, lpProcName="CheckRemoteDebuggerPresent") returned 0x75ea42f0 [0041.058] CheckRemoteDebuggerPresent (in: hProcess=0x318, pbDebuggerPresent=0x75ec94 | out: pbDebuggerPresent=0x75ec94) returned 1 [0041.154] CloseHandle (hObject=0x318) returned 1 [0041.155] CloseHandle (hObject=0x12345678) returned 0 [0041.155] LoadLibraryW (lpLibFileName="user32.dll") returned 0x74b70000 [0041.155] GetLastError () returned 0x6 [0041.157] GetProcAddress (hModule=0x74b70000, lpProcName="EnumWindows") returned 0x74b8a3c0 [0041.164] EnumWindows (lpEnumFunc=0x2620772, lParam=0x0) returned 1 [0041.408] GetClassNameW (in: hWnd=0x1015e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0041.409] GetClassNameW (in: hWnd=0x10128, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0041.409] GetClassNameW (in: hWnd=0x100cc, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.409] GetClassNameW (in: hWnd=0x100c8, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.410] GetClassNameW (in: hWnd=0x100c4, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.410] GetClassNameW (in: hWnd=0x100c0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.410] GetClassNameW (in: hWnd=0x100aa, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.410] GetClassNameW (in: hWnd=0x100a2, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.410] GetClassNameW (in: hWnd=0x10096, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.411] GetClassNameW (in: hWnd=0x100dc, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.411] GetClassNameW (in: hWnd=0x100d0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.411] GetClassNameW (in: hWnd=0x100d4, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.411] GetClassNameW (in: hWnd=0x1008e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0041.412] GetClassNameW (in: hWnd=0x101e0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="ATL:00007FF914EC7230") returned 20 [0041.412] GetClassNameW (in: hWnd=0x10100, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.412] GetClassNameW (in: hWnd=0x100de, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0041.412] GetClassNameW (in: hWnd=0x3007c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="conservative_warnings_Households_class") returned 38 [0041.412] GetClassNameW (in: hWnd=0x30078, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="NickelpmcWebpagewindow") returned 22 [0041.413] GetClassNameW (in: hWnd=0x3006e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="charter_window") returned 14 [0041.413] GetClassNameW (in: hWnd=0x30054, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Barriersexpenditurerecruitmentwin") returned 33 [0041.413] GetClassNameW (in: hWnd=0x3004c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tvtheewin") returned 9 [0041.413] GetClassNameW (in: hWnd=0x30048, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="howard_movers_class") returned 19 [0041.413] GetClassNameW (in: hWnd=0x30056, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Wrist_exhaust_class") returned 19 [0041.414] GetClassNameW (in: hWnd=0x70060, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="bachelorclass") returned 13 [0041.414] GetClassNameW (in: hWnd=0x30172, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Customs_denial_wnd") returned 18 [0041.414] GetClassNameW (in: hWnd=0x6003a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Bidding_Beam_removable_win") returned 26 [0041.414] GetClassNameW (in: hWnd=0x3002c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="nvidia_citizenship_cls") returned 22 [0041.414] GetClassNameW (in: hWnd=0x30158, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="pearlJurisdictionenclass") returned 24 [0041.415] GetClassNameW (in: hWnd=0x3015c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Incomeapp") returned 9 [0041.415] GetClassNameW (in: hWnd=0x30156, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Blade_Mcdonald_Chubby_class") returned 27 [0041.415] GetClassNameW (in: hWnd=0x30154, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Liberiawnd") returned 10 [0041.415] GetClassNameW (in: hWnd=0x301be, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="excellence_Varieties_wnd") returned 24 [0041.415] GetClassNameW (in: hWnd=0x300e0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Cigaretteslisteningpullclass") returned 28 [0041.416] GetClassNameW (in: hWnd=0x30150, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="arc_obviously_Workplace_window") returned 30 [0041.416] GetClassNameW (in: hWnd=0x3008c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="ScreensaverFireplacesubdivisionwindow") returned 37 [0041.416] GetClassNameW (in: hWnd=0x40126, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0041.416] GetClassNameW (in: hWnd=0x10206, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0041.416] GetClassNameW (in: hWnd=0x501f2, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0041.417] GetClassNameW (in: hWnd=0x201d8, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0041.417] GetClassNameW (in: hWnd=0x101d6, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.417] GetClassNameW (in: hWnd=0x101d2, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.417] GetClassNameW (in: hWnd=0x101c4, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="ATL:00007FF91E2AE130") returned 20 [0041.417] GetClassNameW (in: hWnd=0x101b2, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0041.418] GetClassNameW (in: hWnd=0x101b0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0041.418] GetClassNameW (in: hWnd=0x101ac, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.418] GetClassNameW (in: hWnd=0x1014c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0041.418] GetClassNameW (in: hWnd=0x101a8, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.418] GetClassNameW (in: hWnd=0x101aa, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.419] GetClassNameW (in: hWnd=0x10144, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0041.419] GetClassNameW (in: hWnd=0x1013e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0041.419] GetClassNameW (in: hWnd=0x10122, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0041.419] GetClassNameW (in: hWnd=0x1011a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0041.419] GetClassNameW (in: hWnd=0x200b2, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.420] GetClassNameW (in: hWnd=0x1010c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.420] GetClassNameW (in: hWnd=0x1010a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.420] GetClassNameW (in: hWnd=0x100fc, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.420] GetClassNameW (in: hWnd=0x100ee, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0041.420] GetClassNameW (in: hWnd=0x100d2, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0041.421] GetClassNameW (in: hWnd=0x2002a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0041.421] GetClassNameW (in: hWnd=0x100ac, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0041.421] GetClassNameW (in: hWnd=0x10086, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0041.421] GetClassNameW (in: hWnd=0x10082, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0041.421] GetClassNameW (in: hWnd=0x20034, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0041.421] GetClassNameW (in: hWnd=0x20032, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0041.422] GetClassNameW (in: hWnd=0x10038, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0041.422] GetClassNameW (in: hWnd=0x20066, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0041.422] GetClassNameW (in: hWnd=0x100f0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0041.422] GetClassNameW (in: hWnd=0x10160, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.422] GetClassNameW (in: hWnd=0x100e6, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0041.423] GetClassNameW (in: hWnd=0x10090, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.423] GetClassNameW (in: hWnd=0x30074, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.423] GetClassNameW (in: hWnd=0x2007a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.445] GetClassNameW (in: hWnd=0x30062, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.454] GetClassNameW (in: hWnd=0x20050, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.454] GetClassNameW (in: hWnd=0x20068, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.454] GetClassNameW (in: hWnd=0x2005a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.454] GetClassNameW (in: hWnd=0x20058, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.454] GetClassNameW (in: hWnd=0x2005e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.455] GetClassNameW (in: hWnd=0x6007e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.455] GetClassNameW (in: hWnd=0x401ee, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.455] GetClassNameW (in: hWnd=0x50046, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.455] GetClassNameW (in: hWnd=0x4014e, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.456] GetClassNameW (in: hWnd=0x3006a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.456] GetClassNameW (in: hWnd=0x2015a, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.456] GetClassNameW (in: hWnd=0x20152, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.456] GetClassNameW (in: hWnd=0x601ce, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.457] GetClassNameW (in: hWnd=0x301ea, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.457] GetClassNameW (in: hWnd=0x20106, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.457] GetClassNameW (in: hWnd=0x300ea, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.457] GetClassNameW (in: hWnd=0x201f0, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.457] GetClassNameW (in: hWnd=0x101d4, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.458] GetClassNameW (in: hWnd=0x101c6, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.458] GetClassNameW (in: hWnd=0x101ae, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.458] GetClassNameW (in: hWnd=0x10118, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.458] GetClassNameW (in: hWnd=0x10110, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0041.458] GetClassNameW (in: hWnd=0x100fe, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.459] GetClassNameW (in: hWnd=0x10084, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0041.459] GetClassNameW (in: hWnd=0x2006c, lpClassName=0xaa24c8, nMaxCount=260 | out: lpClassName="IME") returned 3 [0044.195] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.195] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.196] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x0 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x1 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.197] VarDecCmp (pdecLeft=0x75eb94, pdecRight=0x75eb84) returned 0x2 [0044.472] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.473] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x1 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.474] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.738] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0044.741] GetProcAddress (hModule=0x75e90000, lpProcName="GetModuleHandleA") returned 0x75ea50b0 [0044.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", nBufferLength=0x105, lpBuffer=0x75e608, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", lpFilePart=0x0) returned 0x24 [0044.779] GetLastError () returned 0x7e [0044.779] GetModuleHandleA (lpModuleName="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe") returned 0x3a0000 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.780] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x1 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.781] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0044.781] GetProcAddress (hModule=0x75e90000, lpProcName="FindResourceA") returned 0x75ee27c0 [0044.793] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.793] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.793] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.793] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.793] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.793] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.794] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x1 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] FindResourceA (hModule=0x3a0000, lpName="z54023wm", lpType="RC_IMAGE") returned 0x3b80f0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.795] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x1 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.796] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0044.797] GetProcAddress (hModule=0x75e90000, lpProcName="SizeofResource") returned 0x75ea6740 [0044.809] SizeofResource (hModule=0x3a0000, hResInfo=0x3b80f0) returned 0xb400 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.810] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x0 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x1 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] VarDecCmp (pdecLeft=0x75e9ec, pdecRight=0x75e9dc) returned 0x2 [0044.811] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0044.811] GetProcAddress (hModule=0x75e90000, lpProcName="LoadResource") returned 0x75ea5b00 [0044.870] LoadResource (hModule=0x3a0000, hResInfo=0x3b80f0) returned 0x3b8158 [0045.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", nBufferLength=0x105, lpBuffer=0x75e070, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ywb3frg1.exe", lpFilePart=0x0) returned 0x24 [0045.240] GetLastError () returned 0x7e [0045.256] GetSystemDirectoryW (in: lpBuffer=0xaa24c8, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0045.257] GetLastError () returned 0x7e [0045.257] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x105, lpBuffer=0x75e070, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0045.257] GetLastError () returned 0x7e [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.257] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.258] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x75e0cc, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0045.264] GetLastError () returned 0x7e [0045.264] GetVersionExW (in: lpVersionInformation=0xaa24c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xaa24c8*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x2, dwBuildNumber=0x23f0, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0045.264] GetLastError () returned 0x7e [0045.264] SetErrorMode (uMode=0x1) returned 0x0 [0045.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)" (normalized: "c:\\program files (x86)"), fInfoLevelId=0x0, lpFileInformation=0x75e54c | out: lpFileInformation=0x75e54c*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0045.266] GetLastError () returned 0x7e [0045.266] SetErrorMode (uMode=0x0) returned 0x1 [0045.266] GetSystemDirectoryW (in: lpBuffer=0xaa24c8, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0045.266] GetLastError () returned 0x7e [0045.266] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x105, lpBuffer=0x75e070, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0045.266] GetLastError () returned 0x7e [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.266] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.267] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.271] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.272] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework", nBufferLength=0x105, lpBuffer=0x75e024, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework", lpFilePart=0x0) returned 0x22 [0045.272] GetLastError () returned 0x7e [0045.274] SetErrorMode (uMode=0x1) returned 0x0 [0045.277] FindFirstFileW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\*", lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17eab434, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x728c6405, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x728c6405, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0xa937e8 [0045.277] GetLastError () returned 0x7e [0045.278] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17eab434, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x728c6405, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x728c6405, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0045.278] GetLastError () returned 0x7e [0045.278] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57280f43, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x57280f43, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x94eee300, ftLastWriteTime.dwHighDateTime=0x1d2837d, nFileSizeHigh=0x0, nFileSizeLow=0x15710, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETFXSBS10.exe", cAlternateFileName="")) returned 1 [0045.278] GetLastError () returned 0x7e [0045.279] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70d34872, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x6fe73bbb, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x6fe73bbb, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0xa1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfxsbs12.hkf", cAlternateFileName="NETFXS~1.HKF")) returned 1 [0045.279] GetLastError () returned 0x7e [0045.279] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f461ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f461ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f461ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp10.dll", cAlternateFileName="")) returned 1 [0045.279] GetLastError () returned 0x7e [0045.279] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f6c457, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f6c457, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f6c457, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp20_mscorwks.dll", cAlternateFileName="")) returned 1 [0045.279] GetLastError () returned 0x7e [0045.279] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f1ff85, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f1ff85, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f1ff85, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbscmp20_perfcounter.dll", cAlternateFileName="")) returned 1 [0045.279] GetLastError () returned 0x7e [0045.279] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f1ff85, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f1ff85, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f1ff85, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_diasymreader.dll", cAlternateFileName="")) returned 1 [0045.280] GetLastError () returned 0x7e [0045.280] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572a71bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x572a71bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x94eee300, ftLastWriteTime.dwHighDateTime=0x1d2837d, nFileSizeHigh=0x0, nFileSizeLow=0x3848, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_iehost.dll", cAlternateFileName="")) returned 1 [0045.280] GetLastError () returned 0x7e [0045.280] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ef9d22, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26ef9d22, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26ef9d22, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_microsoft.jscript.dll", cAlternateFileName="")) returned 1 [0045.280] GetLastError () returned 0x7e [0045.280] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572a71bf, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x572a71bf, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x94eee300, ftLastWriteTime.dwHighDateTime=0x1d2837d, nFileSizeHigh=0x0, nFileSizeLow=0x3848, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_microsoft.vsa.vb.codedomprocessor.dll", cAlternateFileName="")) returned 1 [0045.280] GetLastError () returned 0x7e [0045.280] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f6c457, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f6c457, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f6c457, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_mscordbi.dll", cAlternateFileName="")) returned 1 [0045.280] GetLastError () returned 0x7e [0045.280] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f6c457, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f6c457, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f6c457, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_mscorrc.dll", cAlternateFileName="")) returned 1 [0045.280] GetLastError () returned 0x7e [0045.281] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f1ff85, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f1ff85, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f1ff85, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_mscorsec.dll", cAlternateFileName="")) returned 1 [0045.281] GetLastError () returned 0x7e [0045.281] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f461ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f461ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f461ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_system.configuration.install.dll", cAlternateFileName="")) returned 1 [0045.281] GetLastError () returned 0x7e [0045.281] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f1ff85, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f1ff85, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f1ff85, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_system.data.dll", cAlternateFileName="")) returned 1 [0045.281] GetLastError () returned 0x7e [0045.281] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f461ec, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f461ec, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f461ec, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_system.enterpriseservices.dll", cAlternateFileName="")) returned 1 [0045.281] GetLastError () returned 0x7e [0045.281] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572cd3da, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x572cd3da, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x94eee300, ftLastWriteTime.dwHighDateTime=0x1d2837d, nFileSizeHigh=0x0, nFileSizeLow=0x3848, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_VsaVb7rt.dll", cAlternateFileName="")) returned 1 [0045.281] GetLastError () returned 0x7e [0045.282] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26ef9d22, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26ef9d22, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26ef9d22, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="sbs_wminet_utils.dll", cAlternateFileName="")) returned 1 [0045.282] GetLastError () returned 0x7e [0045.282] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26f6c457, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x26f6c457, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x26f6c457, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedReg12.dll", cAlternateFileName="")) returned 1 [0045.282] GetLastError () returned 0x7e [0045.282] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xeff313f9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71423c43, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.0.3705", cAlternateFileName="V10~1.370")) returned 1 [0045.282] GetLastError () returned 0x7e [0045.282] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c227, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x71423c43, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71423c43, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v1.1.4322", cAlternateFileName="V11~1.432")) returned 1 [0045.282] GetLastError () returned 0x7e [0045.282] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17eab434, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x71fd532b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x71fd532b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v2.0.50727", cAlternateFileName="V20~1.507")) returned 1 [0045.282] GetLastError () returned 0x7e [0045.283] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71fd532b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x72047a1f, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x72047a1f, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.0", cAlternateFileName="")) returned 1 [0045.283] GetLastError () returned 0x7e [0045.283] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x728c6405, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x729f75fc, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x729f75fc, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v3.5", cAlternateFileName="")) returned 1 [0045.283] GetLastError () returned 0x7e [0045.283] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17eab434, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x5b77c4ff, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5b77c4ff, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 1 [0045.283] GetLastError () returned 0x7e [0045.284] FindNextFileW (in: hFindFile=0xa937e8, lpFindFileData=0xaa24c8 | out: lpFindFileData=0xaa24c8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17eab434, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x5b77c4ff, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5b77c4ff, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="v4.0.30319", cAlternateFileName="V40~1.303")) returned 0 [0045.284] GetLastError () returned 0x12 [0045.284] FindClose (in: hFindFile=0xa937e8 | out: hFindFile=0xa937e8) returned 1 [0045.284] SetErrorMode (uMode=0x0) returned 0x1 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.285] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.286] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.287] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.288] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.289] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.290] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.626] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.627] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.628] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.628] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.628] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.628] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.628] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0045.628] GetProcAddress (hModule=0x75e90000, lpProcName="CreateProcessA") returned 0x75ea45b0 [0045.641] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x29c5b40*(cb=0x0, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x29c57e4 | out: lpCommandLine="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe", lpProcessInformation=0x29c57e4*(hProcess=0x2f0, hThread=0x318, dwProcessId=0xee8, dwThreadId=0xef0)) returned 1 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.921] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.922] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0045.922] GetProcAddress (hModule=0x75e90000, lpProcName="GetThreadContext") returned 0x75ea5580 [0045.935] GetThreadContext (in: hThread=0x318, lpContext=0x29c5b4c | out: lpContext=0x29c5b4c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x347000, Edx=0x0, Ecx=0x0, Eax=0x404d61, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0045.935] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.935] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.935] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.935] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.936] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.937] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.937] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.937] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.937] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.937] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.937] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.937] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0045.937] GetProcAddress (hModule=0x75e90000, lpProcName="ReadProcessMemory") returned 0x75ea5e30 [0045.958] ReadProcessMemory (in: hProcess=0x2f0, lpBaseAddress=0x347008, lpBuffer=0x75ec70, nSize=0x4, lpNumberOfBytesRead=0x75ec64 | out: lpBuffer=0x75ec70*, lpNumberOfBytesRead=0x75ec64*=0x4) returned 1 [0045.975] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.975] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.977] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.977] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.979] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.982] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.982] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.982] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.985] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.985] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.985] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.987] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.987] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.987] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.990] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.990] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.990] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.992] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.992] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.992] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.994] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0045.995] LoadLibraryA (lpLibFileName="ntdll") returned 0x77bb0000 [0045.996] GetProcAddress (hModule=0x77bb0000, lpProcName="NtUnmapViewOfSection") returned 0x77c21fb0 [0046.009] NtUnmapViewOfSection (ProcessHandle=0x2f0, BaseAddress=0x400000) returned 0x0 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.009] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.010] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.011] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0046.011] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualAllocEx") returned 0x75ea6990 [0046.023] VirtualAllocEx (hProcess=0x2f0, lpAddress=0x400000, dwSize=0x24000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.069] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.070] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.071] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.071] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0046.071] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.071] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.071] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0046.071] GetProcAddress (hModule=0x75e90000, lpProcName="WriteProcessMemory") returned 0x75ea6b70 [0046.083] WriteProcessMemory (in: hProcess=0x2f0, lpBaseAddress=0x400000, lpBuffer=0x29b7bfc*, nSize=0x1000, lpNumberOfBytesWritten=0x75ec64 | out: lpBuffer=0x29b7bfc*, lpNumberOfBytesWritten=0x75ec64*=0x1000) returned 1 [0046.095] WriteProcessMemory (in: hProcess=0x2f0, lpBaseAddress=0x401000, lpBuffer=0x29c6f84*, nSize=0x0, lpNumberOfBytesWritten=0x75ec64 | out: lpBuffer=0x29c6f84*, lpNumberOfBytesWritten=0x75ec64*=0x0) returned 1 [0046.096] WriteProcessMemory (in: hProcess=0x2f0, lpBaseAddress=0x418000, lpBuffer=0x29c74d4*, nSize=0xa200, lpNumberOfBytesWritten=0x75ec64 | out: lpBuffer=0x29c74d4*, lpNumberOfBytesWritten=0x75ec64*=0xa200) returned 1 [0046.099] WriteProcessMemory (in: hProcess=0x2f0, lpBaseAddress=0x423000, lpBuffer=0x29d16f8*, nSize=0xe00, lpNumberOfBytesWritten=0x75ec64 | out: lpBuffer=0x29d16f8*, lpNumberOfBytesWritten=0x75ec64*=0xe00) returned 1 [0046.194] WriteProcessMemory (in: hProcess=0x2f0, lpBaseAddress=0x347008, lpBuffer=0x29d251c*, nSize=0x4, lpNumberOfBytesWritten=0x75ec64 | out: lpBuffer=0x29d251c*, lpNumberOfBytesWritten=0x75ec64*=0x4) returned 1 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.195] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.196] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0046.197] GetProcAddress (hModule=0x75e90000, lpProcName="SetThreadContext") returned 0x75ea66a0 [0046.197] SetThreadContext (hThread=0x318, lpContext=0x29c5b4c*(ContextFlags=0x10002, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x347000, Edx=0x0, Ecx=0x0, Eax=0x421fc0, Ebp=0x0, Eip=0x0, SegCs=0x0, EFlags=0x0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.198] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x0 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x1 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] VarDecCmp (pdecLeft=0x75e454, pdecRight=0x75e444) returned 0x2 [0046.199] LoadLibraryA (lpLibFileName="kernel32") returned 0x75e90000 [0046.199] GetProcAddress (hModule=0x75e90000, lpProcName="ResumeThread") returned 0x75ea6380 [0046.212] ResumeThread (hThread=0x318) returned 0x1 [0046.388] CoGetContextToken (in: pToken=0x75f81c | out: pToken=0x75f81c) returned 0x0 [0046.388] CObjectContext::QueryInterface () returned 0x0 [0046.388] CObjectContext::GetCurrentThreadType () returned 0x0 [0046.389] Release () returned 0x0 [0046.389] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x13880, cHandles=0x1, pHandles=0xa60a98*=0x188, lpdwindex=0x75f688 | out: lpdwindex=0x75f688) returned 0x0 [0047.350] CAddrControl::AddRef () returned 0x1 Thread: id = 2 os_tid = 0xf68 Thread: id = 3 os_tid = 0x798 Thread: id = 4 os_tid = 0xce4 [0038.745] CoGetContextToken (in: pToken=0x4a6f388 | out: pToken=0x4a6f388) returned 0x800401f0 [0038.745] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 7 os_tid = 0x60 Thread: id = 8 os_tid = 0x2d4 Thread: id = 9 os_tid = 0xc48 Thread: id = 10 os_tid = 0xca0 Process: id = "2" image_name = "cvtres.exe" filename = "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe" page_root = "0xb9ae000" os_pid = "0xee8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xec0" cmd_line = "C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0xef0 [0046.554] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75e90000 [0046.555] GetProcAddress (hModule=0x75e90000, lpProcName="WritePrivateProfileStringA") returned 0x75ed8650 [0046.555] GetProcAddress (hModule=0x75e90000, lpProcName="WriteFile") returned 0x75eff180 [0046.555] GetProcAddress (hModule=0x75e90000, lpProcName="WideCharToMultiByte") returned 0x75ea6b10 [0046.555] GetProcAddress (hModule=0x75e90000, lpProcName="SetFilePointer") returned 0x75eff120 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="SetEndOfFile") returned 0x75eff0e0 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="ReadFile") returned 0x75eff090 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="MultiByteToWideChar") returned 0x75ea5c40 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="MoveFileA") returned 0x75ede410 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="LockResource") returned 0x75ea5bc0 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="LoadResource") returned 0x75ea5b00 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="LoadLibraryA") returned 0x75ea5a80 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetProcAddress") returned 0x75ea51b0 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetPrivateProfileIntA") returned 0x75ed8480 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetModuleHandleA") returned 0x75ea50b0 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetModuleFileNameA") returned 0x75ea5070 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetLastError") returned 0x75ea5010 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileSize") returned 0x75efef30 [0046.556] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileAttributesA") returned 0x75efeee0 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="GetCommandLineA") returned 0x75ea4cb0 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FreeResource") returned 0x75ea4c80 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FreeLibrary") returned 0x75ea4c40 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FormatMessageA") returned 0x75ea4bc0 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FindResourceA") returned 0x75ee27c0 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FindNextFileA") returned 0x75efee20 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FindFirstFileA") returned 0x75efedb0 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="FindClose") returned 0x75efed70 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="DeleteFileA") returned 0x75efed30 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="CreateFileA") returned 0x75efed00 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="CloseHandle") returned 0x75efeab0 [0046.557] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75e90000 [0046.557] GetProcAddress (hModule=0x75e90000, lpProcName="TlsSetValue") returned 0x75ea6870 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="TlsGetValue") returned 0x75ea6850 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="LocalAlloc") returned 0x75ea5b20 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="GetModuleHandleA") returned 0x75ea50b0 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="GetModuleFileNameA") returned 0x75ea5070 [0046.558] LoadLibraryA (lpLibFileName="KERNEL32.DLL") returned 0x75e90000 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="GetCurrentThreadId") returned 0x75ea8820 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="DeleteCriticalSection") returned 0x77bdfb90 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="LeaveCriticalSection") returned 0x77bfb250 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="EnterCriticalSection") returned 0x77bfb2d0 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="InitializeCriticalSection") returned 0x77c0af20 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualFree") returned 0x75ea69d0 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualAlloc") returned 0x75ea6970 [0046.558] GetProcAddress (hModule=0x75e90000, lpProcName="LocalFree") returned 0x75ea5b40 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="LocalAlloc") returned 0x75ea5b20 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="VirtualQuery") returned 0x75ea6a70 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="lstrlenA") returned 0x75ea6c50 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="lstrcpyA") returned 0x75ee7060 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="LoadLibraryExA") returned 0x75ea5aa0 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="GetThreadLocale") returned 0x75ea5600 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="GetStartupInfoA") returned 0x75ee28e0 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="GetModuleFileNameA") returned 0x75ea5070 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="GetLocaleInfoA") returned 0x75ea5020 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="GetLastError") returned 0x75ea5010 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="GetCommandLineA") returned 0x75ea4cb0 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="FreeLibrary") returned 0x75ea4c40 [0046.559] GetProcAddress (hModule=0x75e90000, lpProcName="ExitProcess") returned 0x75ea3cb0 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="WriteFile") returned 0x75eff180 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="SetFilePointer") returned 0x75eff120 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="SetEndOfFile") returned 0x75eff0e0 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="RtlUnwind") returned 0x75ea7c10 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="ReadFile") returned 0x75eff090 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="RaiseException") returned 0x75ea5e20 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="GetStdHandle") returned 0x75ea5330 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileSize") returned 0x75efef30 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="GetSystemTime") returned 0x75ea54e0 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="GetFileType") returned 0x75efef60 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="CreateFileA") returned 0x75efed00 [0046.560] GetProcAddress (hModule=0x75e90000, lpProcName="CloseHandle") returned 0x75efeab0 [0046.560] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegSetValueExA") returned 0x761cffc0 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegQueryValueExA") returned 0x761cf020 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegOpenKeyExA") returned 0x761cf210 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegCreateKeyExA") returned 0x761cf560 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegCloseKey") returned 0x761ced60 [0046.561] LoadLibraryA (lpLibFileName="advapi32.dll") returned 0x761b0000 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegQueryValueExA") returned 0x761cf020 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegOpenKeyExA") returned 0x761cf210 [0046.561] GetProcAddress (hModule=0x761b0000, lpProcName="RegCloseKey") returned 0x761ced60 [0046.561] LoadLibraryA (lpLibFileName="comctl32.dll") returned 0x72970000 [0046.561] GetProcAddress (hModule=0x72970000, lpProcName="InitCommonControls") returned 0x7298e450 [0046.561] LoadLibraryA (lpLibFileName="gdi32.dll") returned 0x75b70000 [0046.561] GetProcAddress (hModule=0x75b70000, lpProcName="StretchDIBits") returned 0x75b73920 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SetWindowOrgEx") returned 0x75b738a0 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SetTextColor") returned 0x75b76490 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SetROP2") returned 0x75b73f80 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SetBrushOrgEx") returned 0x75b77110 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SetBkMode") returned 0x75b76560 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SetBkColor") returned 0x75b76520 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SelectObject") returned 0x75b76460 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SelectClipRgn") returned 0x75b73b40 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="SaveDC") returned 0x75b76610 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="RestoreDC") returned 0x75b765d0 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="MoveToEx") returned 0x75b73730 [0046.562] GetProcAddress (hModule=0x75b70000, lpProcName="IntersectClipRect") returned 0x75b734c0 [0046.563] GetProcAddress (hModule=0x75b70000, lpProcName="GetWindowOrgEx") returned 0x75b77070 [0046.563] GetProcAddress (hModule=0x75b70000, lpProcName="GetStockObject") returned 0x75b766c0 [0046.563] GetProcAddress (hModule=0x75b70000, lpProcName="GetObjectA") returned 0x75b739f0 [0046.563] GetProcAddress (hModule=0x75b70000, lpProcName="GetDeviceCaps") returned 0x75b75c60 [0046.563] GetProcAddress (hModule=0x75b70000, lpProcName="ExcludeClipRect") returned 0x75b77b70 [0046.563] GetProcAddress (hModule=0x75b70000, lpProcName="DeleteObject") returned 0x75b752b0 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="DeleteDC") returned 0x75b75870 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateSolidBrush") returned 0x75b76860 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateRectRgnIndirect") returned 0x75b73c90 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateRectRgn") returned 0x75b76170 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateFontIndirectA") returned 0x75b74880 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateDIBSection") returned 0x75b766f0 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateCompatibleDC") returned 0x75b765a0 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CreateCompatibleBitmap") returned 0x75b76640 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="CombineRgn") returned 0x75b72ec0 [0046.564] GetProcAddress (hModule=0x75b70000, lpProcName="BitBlt") returned 0x75b764d0 [0046.564] LoadLibraryA (lpLibFileName="oleaut32.dll") returned 0x75bb0000 [0046.564] GetProcAddress (hModule=0x75bb0000, lpProcName="VariantCopyInd") returned 0x75be9dd0 [0046.564] GetProcAddress (hModule=0x75bb0000, lpProcName="VariantClear") returned 0x75be9db0 [0046.565] GetProcAddress (hModule=0x75bb0000, lpProcName="SysFreeString") returned 0x75bcb920 [0046.565] GetProcAddress (hModule=0x75bb0000, lpProcName="SysReAllocStringLen") returned 0x75bd1500 [0046.565] GetProcAddress (hModule=0x75bb0000, lpProcName="SysAllocStringLen") returned 0x75bcb7e0 [0046.565] LoadLibraryA (lpLibFileName="shell32.dll") returned 0x76480000 [0046.565] GetProcAddress (hModule=0x76480000, lpProcName="SHFileOperationA") returned 0x76670a00 [0046.565] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="WaitMessage") returned 0x74ba4060 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="ValidateRect") returned 0x74ba4030 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="UpdateWindow") returned 0x74b82b80 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="TranslateMessage") returned 0x74b9f900 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="ShowWindow") returned 0x74ba3ee0 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="SetWindowTextA") returned 0x74b7e620 [0046.565] GetProcAddress (hModule=0x74b70000, lpProcName="SetWindowPos") returned 0x74ba3e90 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SetWindowLongA") returned 0x74b90a80 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SetTimer") returned 0x74ba0370 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SetPropA") returned 0x74b914c0 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SetFocus") returned 0x74ba3d10 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SetCursor") returned 0x74ba2bec [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SetCapture") returned 0x74ba3c50 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="SendMessageA") returned 0x74b80630 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="ScreenToClient") returned 0x74b89ad0 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="RemovePropA") returned 0x74b91780 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="ReleaseDC") returned 0x74b9a480 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="ReleaseCapture") returned 0x74b91770 [0046.566] GetProcAddress (hModule=0x74b70000, lpProcName="RegisterWindowMessageA") returned 0x74b9f7a0 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="RegisterClassA") returned 0x74b87a10 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="PostQuitMessage") returned 0x74b92bc0 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="PostMessageA") returned 0x74b8b8d0 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="PeekMessageA") returned 0x74b887a0 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="OffsetRect") returned 0x74b89620 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="MoveWindow") returned 0x74ba39d0 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="MessageBoxA") returned 0x74bdd740 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="LoadIconA") returned 0x74b92120 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="LoadCursorA") returned 0x74b9ab70 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="KillTimer") returned 0x74ba3950 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="IsZoomed") returned 0x74b8b000 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="IsWindowVisible") returned 0x74b877b0 [0046.567] GetProcAddress (hModule=0x74b70000, lpProcName="IsWindowEnabled") returned 0x74b8a220 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="IsWindow") returned 0x74b97800 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="IsIconic") returned 0x74b7ad50 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="InvalidateRgn") returned 0x74ba38b0 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="InvalidateRect") returned 0x74ba38a0 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="InflateRect") returned 0x74b83570 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetWindowRect") returned 0x74b96c50 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetWindowLongA") returned 0x74b8b4b0 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetWindowDC") returned 0x74ba3710 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetUpdateRgn") returned 0x74b8dfe0 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetUpdateRect") returned 0x74b8efb0 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetSystemMenu") returned 0x74ba3680 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetSysColor") returned 0x74b9fcf0 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetPropA") returned 0x74b8d090 [0046.568] GetProcAddress (hModule=0x74b70000, lpProcName="GetParent") returned 0x74b88570 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetWindow") returned 0x74b9d880 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetKeyState") returned 0x74b8a170 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetFocus") returned 0x74b8d120 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetDC") returned 0x74ba33c0 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetCursorPos") returned 0x74b8dcc0 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetClientRect") returned 0x74b89650 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetClassLongA") returned 0x74b8f0c0 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetClassInfoA") returned 0x74b87d70 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetCapture") returned 0x74b8d1e0 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="GetAsyncKeyState") returned 0x74b8bc40 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="FillRect") returned 0x74b83850 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="EndPaint") returned 0x74ba32d0 [0046.569] GetProcAddress (hModule=0x74b70000, lpProcName="EnableWindow") returned 0x74b90a60 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="EnableMenuItem") returned 0x74b7b1b0 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="DispatchMessageA") returned 0x74b8fd80 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="DestroyWindow") returned 0x74ba3160 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="DestroyIcon") returned 0x74b91810 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="DestroyAcceleratorTable") returned 0x74b8d2a0 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="DeleteMenu") returned 0x74ba3130 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="DefWindowProcA") returned 0x77c35680 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="CreateWindowExA") returned 0x74b91470 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="CopyImage") returned 0x74b8c330 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="ClientToScreen") returned 0x74b8b570 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="CallWindowProcA") returned 0x74b8a030 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="BeginPaint") returned 0x74ba2fb0 [0046.570] GetProcAddress (hModule=0x74b70000, lpProcName="CharLowerA") returned 0x74b92ef0 [0046.570] LoadLibraryA (lpLibFileName="user32.dll") returned 0x74b70000 [0046.571] GetProcAddress (hModule=0x74b70000, lpProcName="GetKeyboardType") returned 0x74be8d80 [0046.571] GetProcAddress (hModule=0x74b70000, lpProcName="MessageBoxA") returned 0x74bdd740 [0046.573] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0046.573] GetModuleFileNameA (in: hModule=0x400000, lpFilename=0x19fe54, nSize=0x105 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe")) returned 0x38 [0046.578] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x19fd2f, nSize=0x105 | out: lpFilename="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" (normalized: "c:\\windows\\microsoft.net\\framework\\v2.0.50727\\cvtres.exe")) returned 0x38 [0046.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Borland\\Locales", ulOptions=0x0, samDesired=0xf003f, phkResult=0x19fe44 | out: phkResult=0x19fe44*=0x0) returned 0x2 [0046.579] RegOpenKeyExA (in: hKey=0x80000001, lpSubKey="Software\\Borland\\Delphi\\Locales", ulOptions=0x0, samDesired=0xf003f, phkResult=0x19fe44 | out: phkResult=0x19fe44*=0x0) returned 0x2 [0046.579] lstrcpyA (in: lpString1=0x19fd2f, lpString2="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" | out: lpString1="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe") returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" [0046.579] GetThreadLocale () returned 0x409 [0046.579] GetLocaleInfoA (in: Locale=0x409, LCType=0x3, lpLCData=0x19fe3f, cchData=5 | out: lpLCData="ENU") returned 4 [0046.580] lstrlenA (lpString="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe") returned 56 [0046.580] lstrcpyA (in: lpString1=0x19fd64, lpString2="ENU" | out: lpString1="ENU") returned="ENU" [0046.580] LoadLibraryExA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.ENU", hFile=0x0, dwFlags=0x2) returned 0x0 [0046.581] lstrcpyA (in: lpString1=0x19fd64, lpString2="EN" | out: lpString1="EN") returned="EN" [0046.581] LoadLibraryExA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.EN", hFile=0x0, dwFlags=0x2) returned 0x0 [0046.585] GetKeyboardType (nTypeFlag=0) returned 4 [0046.585] GetCommandLineA () returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" [0046.585] GetStartupInfoA (in: lpStartupInfo=0x19fee8 | out: lpStartupInfo=0x19fee8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0046.585] GetCurrentThreadId () returned 0xef0 [0046.588] InitCommonControls () [0046.588] LoadLibraryA (lpLibFileName="comctl32.dll") returned 0x72970000 [0046.588] GetProcAddress (hModule=0x72970000, lpProcName="InitCommonControlsEx") returned 0x7298e460 [0046.588] InitCommonControlsEx (picce=0x19ff2c) returned 1 [0046.591] LocalAlloc (uFlags=0x0, uBytes=0xff8) returned 0x7d5e80 [0046.591] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x1) returned 0x2080000 [0046.591] LocalAlloc (uFlags=0x0, uBytes=0x644) returned 0x7d6e80 [0046.591] VirtualAlloc (lpAddress=0x2080000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2080000 [0046.594] RegisterClipboardFormatA (lpszFormat="inner message") returned 0xc16b [0046.597] GetSystemTime (in: lpSystemTime=0x19ff24 | out: lpSystemTime=0x19ff24*(wYear=0x7e4, wMonth=0x1, wDayOfWeek=0x0, wDay=0x5, wHour=0x2, wMinute=0x3b, wSecond=0x3a, wMilliseconds=0x199)) [0046.599] GetCommandLineA () returned="C:\\Windows\\Microsoft.NET\\Framework\\v2.0.50727\\cvtres.exe" [0046.601] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0046.602] GetClassInfoA (in: hInstance=0x400000, lpClassName="App", lpWndClass=0x19fe94 | out: lpWndClass=0x19fe94) returned 0 [0046.602] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_App", lpWndClass=0x19fdfc | out: lpWndClass=0x19fdfc) returned 0 [0046.602] RegisterClassA (lpWndClass=0x19fe94) returned 0xc16a [0046.602] CreateWindowExA (dwExStyle=0x40000, lpClassName="obj_App", lpWindowName="", dwStyle=0x80ca0000, X=-2147483648, Y=-2147483648, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x4020a [0047.016] SetPropA (hWnd=0x4020a, lpString="SELF_", hData=0x20803a4) returned 1 [0047.016] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x81, wParam=0x0, lParam=0x19f9d0) returned 0x1 [0047.023] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.023] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x83, wParam=0x0, lParam=0x19f9bc) returned 0x0 [0047.186] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.186] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x1, wParam=0x0, lParam=0x19f9d0) returned 0x0 [0047.187] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.187] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0047.187] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.187] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x3, wParam=0x0, lParam=0x1a0003) returned 0x0 [0047.189] SendMessageA (hWnd=0x4020a, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0047.189] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.189] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0047.190] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.190] LoadIconA (hInstance=0x400000, lpIconName="MAINICON") returned 0x0 [0047.190] SendMessageA (hWnd=0x4020a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0047.190] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.190] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0047.190] GetSystemMenu (hWnd=0x4020a, bRevert=0) returned 0x130235 [0047.196] EnableMenuItem (hMenu=0x130235, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0047.197] DeleteMenu (hMenu=0x130235, uPosition=0xf000, uFlags=0x0) returned 1 [0047.197] DeleteMenu (hMenu=0x130235, uPosition=0xf010, uFlags=0x0) returned 1 [0047.197] DeleteMenu (hMenu=0x130235, uPosition=0xf030, uFlags=0x0) returned 1 [0047.197] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0047.197] GetClassInfoA (in: hInstance=0x400000, lpClassName="Form", lpWndClass=0x19fe10 | out: lpWndClass=0x19fe10) returned 0 [0047.197] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_Form", lpWndClass=0x19fd78 | out: lpWndClass=0x19fd78) returned 0 [0047.197] RegisterClassA (lpWndClass=0x19fe10) returned 0xc16d [0047.197] CreateWindowExA (dwExStyle=0x10000, lpClassName="obj_Form", lpWindowName="", dwStyle=0x6cf0000, X=-2147483648, Y=-2147483648, nWidth=64, nHeight=64, hWndParent=0x4020a, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x50208 [0047.197] SetPropA (hWnd=0x50208, lpString="SELF_", hData=0x20809e0) returned 1 [0047.197] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x24, wParam=0x0, lParam=0x19f95c) returned 0x0 [0047.198] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.198] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x81, wParam=0x0, lParam=0x19f950) returned 0x1 [0047.199] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.199] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x83, wParam=0x0, lParam=0x19f93c) returned 0x0 [0047.200] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.200] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x1, wParam=0x0, lParam=0x19f950) returned 0x0 [0047.201] SendMessageA (hWnd=0x50208, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0047.201] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.201] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0047.201] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.201] LoadIconA (hInstance=0x400000, lpIconName="MAINICON") returned 0x0 [0047.202] SendMessageA (hWnd=0x50208, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0047.202] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.202] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0047.202] LoadIconA (hInstance=0x400000, lpIconName="ICON0") returned 0x3023b [0047.204] SendMessageA (hWnd=0x4020a, Msg=0x80, wParam=0x1, lParam=0x3023b) returned 0x0 [0047.204] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.204] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x80, wParam=0x1, lParam=0x3023b) returned 0x0 [0047.206] SendMessageA (hWnd=0x50208, Msg=0x80, wParam=0x1, lParam=0x3023b) returned 0x0 [0047.206] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.207] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x80, wParam=0x1, lParam=0x3023b) returned 0x0 [0047.208] InvalidateRect (hWnd=0x50208, lpRect=0x0, bErase=1) returned 1 [0047.208] GetWindowRect (in: hWnd=0x50208, lpRect=0x19feb4 | out: lpRect=0x19feb4) returned 1 [0047.208] GetWindowRect (in: hWnd=0x50208, lpRect=0x19fe98 | out: lpRect=0x19fe98) returned 1 [0047.208] SetWindowPos (hWnd=0x50208, hWndInsertAfter=0x0, X=0, Y=78, cx=136, cy=64, uFlags=0x14) returned 1 [0047.208] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.208] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x46, wParam=0x0, lParam=0x19fe44) returned 0x0 [0047.208] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.208] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x24, wParam=0x0, lParam=0x19fadc) returned 0x0 [0047.210] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.210] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x47, wParam=0x0, lParam=0x19fe44) returned 0x0 [0047.210] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.210] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x3, wParam=0x0, lParam=0x6d0008) returned 0x0 [0047.214] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.214] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x60091 [0047.215] GetWindowRect (in: hWnd=0x50208, lpRect=0x19feb0 | out: lpRect=0x19feb0) returned 1 [0047.215] GetWindowRect (in: hWnd=0x50208, lpRect=0x19fe98 | out: lpRect=0x19fe98) returned 1 [0047.215] SetWindowPos (hWnd=0x50208, hWndInsertAfter=0x0, X=0, Y=0, cx=136, cy=64, uFlags=0x14) returned 1 [0047.215] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.215] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x46, wParam=0x0, lParam=0x19fe44) returned 0x0 [0047.215] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.215] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x24, wParam=0x0, lParam=0x19fadc) returned 0x0 [0047.216] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.216] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x47, wParam=0x0, lParam=0x19fe44) returned 0x0 [0047.216] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.217] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x3, wParam=0x0, lParam=0x1f0008) returned 0x0 [0047.217] GetWindowRect (in: hWnd=0x50208, lpRect=0x19fec4 | out: lpRect=0x19fec4) returned 1 [0047.217] GetWindowRect (in: hWnd=0x50208, lpRect=0x19fea8 | out: lpRect=0x19fea8) returned 1 [0047.217] SetWindowPos (hWnd=0x50208, hWndInsertAfter=0x0, X=0, Y=0, cx=853, cy=455, uFlags=0x14) returned 1 [0047.217] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.217] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x46, wParam=0x0, lParam=0x19fe54) returned 0x0 [0047.217] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.217] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x24, wParam=0x0, lParam=0x19faec) returned 0x0 [0047.218] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.218] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x83, wParam=0x1, lParam=0x19fe2c) returned 0x0 [0047.219] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.219] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x47, wParam=0x0, lParam=0x19fe54) returned 0x0 [0047.219] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.219] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x5, wParam=0x0, lParam=0x1a00345) returned 0x0 [0047.220] GetWindowLongA (hWnd=0x50208, nIndex=-16) returned 114229248 [0047.220] GetWindowLongA (hWnd=0x50208, nIndex=-20) returned 65792 [0047.220] GetClassLongA (hWnd=0x50208, nIndex=-26) returned 0x8 [0047.220] IsWindowEnabled (hWnd=0x50208) returned 1 [0047.220] LoadCursorA (hInstance=0x0, lpCursorName=0x0) returned 0x0 [0047.220] CreateFontIndirectA (lplf=0x2081111) returned 0xa071e [0047.220] SendMessageA (hWnd=0x50208, Msg=0x30, wParam=0xa071e, lParam=0xffff) returned 0x0 [0047.220] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.220] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x30, wParam=0xa071e, lParam=0xffff) returned 0x0 [0047.220] InvalidateRect (hWnd=0x50208, lpRect=0x0, bErase=1) returned 1 [0047.220] GetDC (hWnd=0x0) returned 0x60100ce [0047.220] GetDeviceCaps (hdc=0x60100ce, index=90) returned 96 [0047.220] ReleaseDC (hWnd=0x0, hDC=0x60100ce) returned 1 [0047.220] CreateFontIndirectA (lplf=0x2081111) returned 0xa071f [0047.220] SendMessageA (hWnd=0x50208, Msg=0x30, wParam=0xa071f, lParam=0xffff) returned 0x0 [0047.220] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.220] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x30, wParam=0xa071f, lParam=0xffff) returned 0x0 [0047.220] InvalidateRect (hWnd=0x50208, lpRect=0x0, bErase=1) returned 1 [0047.221] DeleteObject (ho=0xa071e) returned 1 [0047.221] SendMessageA (hWnd=0x50208, Msg=0x30, wParam=0xa071f, lParam=0xffff) returned 0x0 [0047.221] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.221] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x30, wParam=0xa071f, lParam=0xffff) returned 0x0 [0047.221] InvalidateRect (hWnd=0x50208, lpRect=0x0, bErase=1) returned 1 [0047.221] SetWindowPos (hWnd=0x50208, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x293) returned 1 [0047.221] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.221] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x46, wParam=0x0, lParam=0x19fe94) returned 0x0 [0047.221] ShowWindow (hWnd=0x50208, nCmdShow=0) returned 0 [0047.221] GetClientRect (in: hWnd=0x4020a, lpRect=0x19feb0 | out: lpRect=0x19feb0) returned 1 [0047.221] FindResourceA (hModule=0x400000, lpName="Str1", lpType=0x64) returned 0x423150 [0047.221] LoadResource (hModule=0x400000, hResInfo=0x423150) returned 0x41fcf0 [0047.221] LockResource (hResData=0x41fcf0) returned 0x41fcf0 [0047.221] FreeResource (hResData=0x41fcf0) returned 0 [0047.221] ShowWindow (hWnd=0x4020a, nCmdShow=0) returned 0 [0047.222] GetSystemTime (in: lpSystemTime=0x19fe74 | out: lpSystemTime=0x19fe74*(wYear=0x7e4, wMonth=0x1, wDayOfWeek=0x0, wDay=0x5, wHour=0x2, wMinute=0x3b, wSecond=0x3b, wMilliseconds=0x20)) [0047.222] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0047.222] GetClassInfoA (in: hInstance=0x400000, lpClassName="", lpWndClass=0x19fe58 | out: lpWndClass=0x19fe58) returned 0 [0047.222] GetClassInfoA (in: hInstance=0x400000, lpClassName="obj_", lpWndClass=0x19fdc0 | out: lpWndClass=0x19fdc0) returned 0 [0047.222] RegisterClassA (lpWndClass=0x19fe58) returned 0xc16f [0047.222] CreateWindowExA (dwExStyle=0x10000, lpClassName="obj_", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=-2147483648, nHeight=-2147483648, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x90052 [0047.222] SetPropA (hWnd=0x90052, lpString="SELF_", hData=0x20839d0) returned 1 [0047.223] NtdllDefWindowProc_A (hWnd=0x90052, Msg=0x24, wParam=0x0, lParam=0x19f9a4) returned 0x0 [0047.223] GetPropA (hWnd=0x90052, lpString="SELF_") returned 0x20839d0 [0047.223] NtdllDefWindowProc_A (hWnd=0x90052, Msg=0x81, wParam=0x0, lParam=0x19f998) returned 0x1 [0047.223] GetPropA (hWnd=0x90052, lpString="SELF_") returned 0x20839d0 [0047.223] NtdllDefWindowProc_A (hWnd=0x90052, Msg=0x83, wParam=0x0, lParam=0x19f984) returned 0x0 [0047.224] GetPropA (hWnd=0x90052, lpString="SELF_") returned 0x20839d0 [0047.224] NtdllDefWindowProc_A (hWnd=0x90052, Msg=0x1, wParam=0x0, lParam=0x19f998) returned 0x0 [0047.225] SendMessageA (hWnd=0x90052, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0047.225] GetPropA (hWnd=0x90052, lpString="SELF_") returned 0x20839d0 [0047.225] NtdllDefWindowProc_A (hWnd=0x90052, Msg=0x128, wParam=0x10002, lParam=0x0) returned 0x0 [0047.226] GetPropA (hWnd=0x90052, lpString="SELF_") returned 0x20839d0 [0047.226] SetTimer (hWnd=0x90052, nIDEvent=0x208283c, uElapse=0x1388, lpTimerFunc=0x408f0c) returned 0x208283c [0047.226] SetTimer (hWnd=0x90052, nIDEvent=0x20829a8, uElapse=0x2328, lpTimerFunc=0x408f0c) returned 0x20829a8 [0047.226] ShowWindow (hWnd=0x50208, nCmdShow=0) returned 0 [0047.226] GetClientRect (in: hWnd=0x4020a, lpRect=0x19ff1c | out: lpRect=0x19ff1c) returned 1 [0047.226] WaitMessage () returned 1 [0047.226] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0047.226] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0047.226] DispatchMessageA (lpMsg=0x19ff2c) returned 0x0 [0047.226] GetPropA (hWnd=0x4020a, lpString="SELF_") returned 0x20803a4 [0047.226] NtdllDefWindowProc_A (hWnd=0x4020a, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0047.226] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0047.226] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0047.226] DispatchMessageA (lpMsg=0x19ff2c) returned 0x0 [0047.226] GetPropA (hWnd=0x50208, lpString="SELF_") returned 0x20809e0 [0047.227] NtdllDefWindowProc_A (hWnd=0x50208, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0047.227] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0047.227] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0047.227] DispatchMessageA (lpMsg=0x19ff2c) returned 0x0 [0047.227] GetPropA (hWnd=0x90052, lpString="SELF_") returned 0x20839d0 [0047.227] NtdllDefWindowProc_A (hWnd=0x90052, Msg=0x31f, wParam=0x1, lParam=0x0) returned 0x0 [0047.227] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 0 [0047.227] WaitMessage () returned 1 [0052.221] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0052.222] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0052.222] DispatchMessageA (lpMsg=0x19ff2c) returned 0x0 [0052.223] GetSystemTime (in: lpSystemTime=0x19fd20 | out: lpSystemTime=0x19fd20*(wYear=0x7e4, wMonth=0x1, wDayOfWeek=0x0, wDay=0x5, wHour=0x3, wMinute=0x0, wSecond=0x4, wMilliseconds=0x25)) [0052.225] VirtualAlloc (lpAddress=0x2084000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2084000 [0052.231] KillTimer (hWnd=0x90052, uIDEvent=0x208283c) returned 1 [0052.231] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 0 [0052.231] WaitMessage () returned 1 [0056.228] PeekMessageA (in: lpMsg=0x19ff2c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x19ff2c) returned 1 [0056.228] TranslateMessage (lpMsg=0x19ff2c) returned 0 [0056.228] DispatchMessageA (lpMsg=0x19ff2c) [0056.231] FindFirstFileA (in: lpFileName="C:\\Users\\*.*", lpFindFileData=0x19fbec | out: lpFindFileData=0x19fbec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x90052, cFileName=".", cAlternateFileName="")) returned 0x7d2f98 [0056.233] FindNextFileA (in: hFindFile=0x7d2f98, lpFindFileData=0x19fbec | out: lpFindFileData=0x19fbec*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x1, dwReserved1=0x90052, cFileName="..", cAlternateFileName="")) returned 1 [0056.233] FindNextFileA (in: hFindFile=0x7d2f98, lpFindFileData=0x19fbec | out: lpFindFileData=0x19fbec*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x90052, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0056.233] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\*.*", lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77002d, dwReserved1=0x6e0069, cFileName=".", cAlternateFileName="")) returned 0x7d2bd8 [0056.234] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77002d, dwReserved1=0x6e0069, cFileName="..", cAlternateFileName="")) returned 1 [0056.234] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77002d, dwReserved1=0x6e0069, cFileName="Adobe", cAlternateFileName="")) returned 1 [0056.234] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Adobe\\*.*", lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0056.235] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.235] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0056.236] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0056.238] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.238] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0056.238] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0056.240] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0056.240] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0056.240] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0056.240] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0056.240] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2a18 [0056.241] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0056.241] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0056.241] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0056.241] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0056.241] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2c98 [0056.242] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0056.242] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0056.242] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0056.242] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0056.242] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0056.242] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0056.242] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0056.242] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6e0069, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0056.242] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Application Data\\*.*", lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="Ø+}")) returned 0xffffffff [0056.242] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6e0069, cFileName="Comms", cAlternateFileName="")) returned 1 [0056.242] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Comms\\*.*", lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName=".", cAlternateFileName="")) returned 0x7d2c98 [0056.244] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName="..", cAlternateFileName="")) returned 1 [0056.244] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName="..", cAlternateFileName="")) returned 0 [0056.244] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0056.244] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6e0069, cFileName="Desktop", cAlternateFileName="")) returned 1 [0056.244] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Desktop\\*.*", lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName="..", cAlternateFileName="Ø+}")) returned 0xffffffff [0056.245] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6e0069, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0056.245] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Documents\\*.*", lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName="..", cAlternateFileName="Ø+}")) returned 0xffffffff [0056.245] FindNextFileA (in: hFindFile=0x7d2bd8, lpFindFileData=0x19f984 | out: lpFindFileData=0x19f984*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x6e0069, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0056.245] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*.*", lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName=".", cAlternateFileName="")) returned 0x7d2f18 [0056.245] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName="..", cAlternateFileName="")) returned 1 [0056.245] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f726564, dwReserved1=0x302e3531, cFileName="AppV", cAlternateFileName="")) returned 1 [0056.245] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d3018 [0056.245] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0056.245] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Setup", cAlternateFileName="")) returned 1 [0056.245] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0056.246] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0056.246] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1 [0056.249] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\officeintegrator.ps1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0056.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\T2Zm1WNlSW50ZWdyYXRvci5wczE9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\t2zm1wnlsw50zwdyyxrvci5wcze9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0056.252] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1368 [0056.252] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0056.252] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0056.407] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1368, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1368, lpOverlapped=0x0) returned 1 [0056.409] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1370, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1370, lpOverlapped=0x0) returned 1 [0056.411] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0056.535] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0056.550] CloseHandle (hObject=0x1fc) returned 1 [0056.550] CloseHandle (hObject=0x200) returned 1 [0056.553] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\officeintegrator.ps1"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\T2Zm1WNlSW50ZWdyYXRvci5wczE9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\t2zm1wnlsw50zwdyyxrvci5wcze9.0ilfzr")) returned 0 [0056.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\T2Zm1WNlSW50ZWdyYXRvci5wczE9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\t2zm1wnlsw50zwdyyxrvci5wcze9.0ilfzr")) returned 0x20 [0056.553] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0x7d2fd8 [0056.554] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0 [0056.554] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0056.554] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\officeintegrator.ps1")) returned 0 [0056.554] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\OfficeIntegrator.ps1" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\officeintegrator.ps1")) returned 0x20 [0056.554] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0 [0056.554] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0056.554] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="Setup", cAlternateFileName="")) returned 0 [0056.554] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0056.555] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x5f727075, dwReserved1=0x302e3531, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0056.555] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49656369, dwReserved1=0x6765746e, cFileName=".", cAlternateFileName="")) returned 0x7d2958 [0056.555] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49656369, dwReserved1=0x6765746e, cFileName="..", cAlternateFileName="")) returned 1 [0056.555] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x49656369, dwReserved1=0x6765746e, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0056.555] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0056.557] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0056.557] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0056.557] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0056.559] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0056.559] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0056.559] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0056.560] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0056.561] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x564f [0056.561] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0056.561] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0057.089] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x564f, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x564f, lpOverlapped=0x0) returned 1 [0057.092] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5660, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x5660, lpOverlapped=0x0) returned 1 [0057.093] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0057.166] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0057.177] CloseHandle (hObject=0x1fc) returned 1 [0057.177] CloseHandle (hObject=0x204) returned 1 [0057.179] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0 [0057.179] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0x20 [0057.179] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x8c, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2ad8 [0057.180] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x8c, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0057.180] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0057.180] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml")) returned 1 [0057.181] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml")) returned 0xffffffff [0057.181] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0057.181] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\s641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0057.182] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\czy0mtazmy5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0057.182] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0057.182] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0057.183] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0057.362] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x66, lpOverlapped=0x0) returned 1 [0057.363] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70, lpOverlapped=0x0) returned 1 [0057.364] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0057.387] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0057.446] CloseHandle (hObject=0x204) returned 1 [0057.446] CloseHandle (hObject=0x1fc) returned 1 [0057.447] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\s641033.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\czy0mtazmy5oyxno.0ilfzr")) returned 0 [0057.447] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\czy0mtazmy5oyxno.0ilfzr")) returned 0x20 [0057.448] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x78, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 0x7d2a58 [0057.448] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x78, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 0 [0057.448] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0057.448] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\s641033.hash")) returned 1 [0057.449] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\s641033.hash")) returned 0xffffffff [0057.449] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0057.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0057.450] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0057.450] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd77c4 [0057.450] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0057.451] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0057.780] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xd77c4, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xd77c4, lpOverlapped=0x0) returned 1 [0057.849] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd77d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xd77d0, lpOverlapped=0x0) returned 1 [0057.865] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0057.888] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0057.950] CloseHandle (hObject=0x1fc) returned 1 [0057.950] CloseHandle (hObject=0x204) returned 1 [0057.968] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr")) returned 0 [0057.969] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr")) returned 0x20 [0057.969] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2998 [0057.970] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0057.970] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0057.970] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat")) returned 1 [0057.979] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat")) returned 0xffffffff [0057.979] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0057.980] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0057.980] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0057.980] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0058.049] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0058.049] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0058.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0058.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0058.053] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5211 [0058.053] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0058.053] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0058.339] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5211, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x5211, lpOverlapped=0x0) returned 1 [0058.343] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5220, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x5220, lpOverlapped=0x0) returned 1 [0058.344] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0058.367] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0058.427] CloseHandle (hObject=0x204) returned 1 [0058.428] CloseHandle (hObject=0x1fc) returned 1 [0058.429] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0 [0058.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0058.430] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2998 [0058.430] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0058.430] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0058.430] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml")) returned 1 [0058.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml")) returned 0xffffffff [0058.431] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0058.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\s640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0058.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\czy0mc5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0058.433] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0058.433] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0058.433] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0058.560] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x66, lpOverlapped=0x0) returned 1 [0058.573] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70, lpOverlapped=0x0) returned 1 [0058.574] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0058.599] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0058.610] CloseHandle (hObject=0x1fc) returned 1 [0058.610] CloseHandle (hObject=0x204) returned 1 [0058.873] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\s640.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\czy0mc5oyxno.0ilfzr")) returned 0 [0058.874] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\czy0mc5oyxno.0ilfzr")) returned 0x20 [0058.874] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\s640.hash", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 0x7d2d18 [0058.875] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 0 [0058.875] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0058.875] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\s640.hash")) returned 1 [0058.876] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\s640.hash")) returned 0xffffffff [0058.877] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0058.877] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0058.877] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0058.878] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x38480a [0058.878] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0058.878] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0059.088] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x38480a, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x38480a, lpOverlapped=0x0) returned 1 [0059.602] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x384810, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x384810, lpOverlapped=0x0) returned 1 [0059.880] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0059.903] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0059.968] CloseHandle (hObject=0x204) returned 1 [0059.969] CloseHandle (hObject=0x1fc) returned 1 [0060.234] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0 [0060.235] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0x20 [0060.235] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2b18 [0060.235] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0060.235] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0060.235] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat")) returned 1 [0060.241] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat")) returned 0xffffffff [0060.241] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0060.241] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0060.241] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0060.241] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0060.241] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x67653631, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0060.241] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0060.241] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="..", cAlternateFileName="")) returned 1 [0060.242] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0060.242] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2c58 [0060.242] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0060.243] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0060.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0060.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0060.244] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x564f [0060.244] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0060.244] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0060.417] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x564f, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x564f, lpOverlapped=0x0) returned 1 [0060.551] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5660, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x5660, lpOverlapped=0x0) returned 1 [0060.552] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0060.575] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0060.586] CloseHandle (hObject=0x1fc) returned 1 [0060.586] CloseHandle (hObject=0x204) returned 1 [0060.587] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0 [0060.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0x20 [0060.588] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2fd8 [0060.588] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0060.588] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0060.588] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml")) returned 1 [0060.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml")) returned 0xffffffff [0060.589] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0060.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\s641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0060.630] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\czy0mtazmy5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0060.630] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0060.630] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0060.631] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0060.914] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x66, lpOverlapped=0x0) returned 1 [0060.915] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70, lpOverlapped=0x0) returned 1 [0060.916] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0060.945] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.028] CloseHandle (hObject=0x204) returned 1 [0061.028] CloseHandle (hObject=0x1fc) returned 1 [0061.029] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\s641033.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\czy0mtazmy5oyxno.0ilfzr")) returned 0 [0061.029] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\czy0mtazmy5oyxno.0ilfzr")) returned 0x20 [0061.029] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\s641033.hash", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 0x7d2a18 [0061.029] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 0 [0061.029] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0061.030] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\s641033.hash")) returned 1 [0061.030] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\s641033.hash")) returned 0xffffffff [0061.031] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0061.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0061.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0061.031] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd77c4 [0061.031] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0061.032] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0061.236] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xd77c4, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xd77c4, lpOverlapped=0x0) returned 1 [0061.264] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd77d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xd77d0, lpOverlapped=0x0) returned 1 [0061.316] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0061.339] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0061.409] CloseHandle (hObject=0x1fc) returned 1 [0061.409] CloseHandle (hObject=0x204) returned 1 [0061.427] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr")) returned 0 [0061.427] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr")) returned 0x20 [0061.427] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d3098 [0061.428] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0061.428] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0061.428] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat")) returned 1 [0061.436] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat")) returned 0xffffffff [0061.436] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0061.436] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0061.436] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0061.436] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0061.437] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0061.437] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0061.437] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0061.438] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0061.438] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5211 [0061.438] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0061.439] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0061.624] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5211, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x5211, lpOverlapped=0x0) returned 1 [0061.914] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5220, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x5220, lpOverlapped=0x0) returned 1 [0061.919] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0061.944] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.034] CloseHandle (hObject=0x204) returned 1 [0062.034] CloseHandle (hObject=0x1fc) returned 1 [0062.040] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0 [0062.041] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0062.041] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2ad8 [0062.041] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0062.041] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0062.041] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml")) returned 1 [0062.043] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml")) returned 0xffffffff [0062.043] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0062.043] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\s640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0062.044] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\czy0mc5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0062.045] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0062.045] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0062.045] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0062.220] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x66, lpOverlapped=0x0) returned 1 [0062.221] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70, lpOverlapped=0x0) returned 1 [0062.223] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0062.246] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0062.319] CloseHandle (hObject=0x1fc) returned 1 [0062.319] CloseHandle (hObject=0x204) returned 1 [0062.320] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\s640.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\czy0mc5oyxno.0ilfzr")) returned 0 [0062.320] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\czy0mc5oyxno.0ilfzr")) returned 0x20 [0062.320] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\s640.hash", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 0x7d2a58 [0062.320] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 0 [0062.320] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0062.321] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\s640.hash")) returned 1 [0062.322] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\s640.hash")) returned 0xffffffff [0062.322] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0062.322] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0062.322] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0062.322] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x38480a [0062.322] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0062.323] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0062.480] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x38480a, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x38480a, lpOverlapped=0x0) returned 1 [0063.059] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x384810, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x384810, lpOverlapped=0x0) returned 1 [0063.226] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0063.265] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0063.277] CloseHandle (hObject=0x204) returned 1 [0063.277] CloseHandle (hObject=0x1fc) returned 1 [0063.553] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0 [0063.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0x20 [0063.554] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2d18 [0063.554] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0063.554] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0063.554] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat")) returned 1 [0063.559] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat")) returned 0xffffffff [0063.560] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0063.560] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0063.560] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0063.560] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0063.560] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x67653631, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0063.560] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0063.562] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="..", cAlternateFileName="")) returned 1 [0063.562] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0063.562] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0063.564] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0063.564] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0063.564] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0063.564] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0063.565] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x564f [0063.565] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0063.565] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0063.788] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x564f, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x564f, lpOverlapped=0x0) returned 1 [0063.790] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5660, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x5660, lpOverlapped=0x0) returned 1 [0063.792] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0063.839] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0063.914] CloseHandle (hObject=0x1fc) returned 1 [0063.914] CloseHandle (hObject=0x204) returned 1 [0063.916] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0 [0063.916] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0x20 [0063.916] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2c98 [0063.916] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0063.917] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0063.917] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml")) returned 1 [0063.918] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml")) returned 0xffffffff [0063.918] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0063.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\s641033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0063.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\czy0mtazmy5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0063.918] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0063.918] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0063.919] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0064.210] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x66, lpOverlapped=0x0) returned 1 [0064.211] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70, lpOverlapped=0x0) returned 1 [0064.212] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0064.235] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0064.247] CloseHandle (hObject=0x204) returned 1 [0064.247] CloseHandle (hObject=0x1fc) returned 1 [0064.248] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\s641033.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\czy0mtazmy5oyxno.0ilfzr")) returned 0 [0064.248] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\czY0MTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\czy0mtazmy5oyxno.0ilfzr")) returned 0x20 [0064.248] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\s641033.hash", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 0x7d2fd8 [0064.249] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 0 [0064.249] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0064.249] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\s641033.hash")) returned 1 [0064.250] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\s641033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\s641033.hash")) returned 0xffffffff [0064.250] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0064.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0064.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0064.250] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd77c4 [0064.250] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0064.251] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0064.461] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xd77c4, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xd77c4, lpOverlapped=0x0) returned 1 [0064.521] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd77d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xd77d0, lpOverlapped=0x0) returned 1 [0064.538] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0064.618] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0064.630] CloseHandle (hObject=0x1fc) returned 1 [0064.630] CloseHandle (hObject=0x204) returned 1 [0064.655] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr")) returned 0 [0064.656] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\c3RyZWFtLng2NC5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\c3ryzwftlng2nc5l3i11cy5tyw46zgf0.0ilfzr")) returned 0x20 [0064.656] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d3018 [0064.656] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0064.656] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0064.656] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat")) returned 1 [0064.664] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat")) returned 0xffffffff [0064.665] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0064.665] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0064.665] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0064.665] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2a58 [0064.667] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0064.667] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0064.667] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0064.667] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0064.668] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5211 [0064.668] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0064.668] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0064.831] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5211, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x5211, lpOverlapped=0x0) returned 1 [0064.833] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5220, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x5220, lpOverlapped=0x0) returned 1 [0064.834] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0064.862] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0064.874] CloseHandle (hObject=0x204) returned 1 [0064.874] CloseHandle (hObject=0x1fc) returned 1 [0064.875] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0 [0064.876] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0064.876] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2c18 [0064.876] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0064.876] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0064.876] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml")) returned 1 [0064.877] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml")) returned 0xffffffff [0064.877] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0064.877] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\s640.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0064.878] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\czy0mc5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0064.878] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0064.878] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0064.878] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0065.067] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x66, lpOverlapped=0x0) returned 1 [0065.068] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70, lpOverlapped=0x0) returned 1 [0065.069] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0065.094] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0065.154] CloseHandle (hObject=0x1fc) returned 1 [0065.154] CloseHandle (hObject=0x204) returned 1 [0065.155] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\s640.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\czy0mc5oyxno.0ilfzr")) returned 0 [0065.155] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\czY0MC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\czy0mc5oyxno.0ilfzr")) returned 0x20 [0065.156] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\s640.hash", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 0x7d2fd8 [0065.156] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 0 [0065.156] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0065.156] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\s640.hash")) returned 1 [0065.157] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\s640.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\s640.hash")) returned 0xffffffff [0065.157] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0065.157] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0065.157] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0065.157] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x38480a [0065.157] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0065.158] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0065.482] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x38480a, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x38480a, lpOverlapped=0x0) returned 1 [0065.620] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x384810, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x384810, lpOverlapped=0x0) returned 1 [0065.969] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0066.004] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0066.020] CloseHandle (hObject=0x204) returned 1 [0066.020] CloseHandle (hObject=0x1fc) returned 1 [0066.172] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0 [0066.173] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\c3RyZWFtLng2NC54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\c3ryzwftlng2nc54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0x20 [0066.173] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2a98 [0066.173] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0066.174] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0066.174] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat")) returned 1 [0066.179] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat")) returned 0xffffffff [0066.179] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0066.179] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0066.179] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e343678, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0066.179] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0066.179] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x2e656e6f, dwReserved1=0x67653631, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0066.180] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.0.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0066.180] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy4wLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy4wln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0066.180] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7b6 [0066.180] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0066.181] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0066.260] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7b6, lpNumberOfBytesRead=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19f22c*=0x7b6, lpOverlapped=0x0) returned 1 [0066.273] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19f22c*=0x7c0, lpOverlapped=0x0) returned 1 [0066.274] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0066.298] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0066.309] CloseHandle (hObject=0x1f8) returned 1 [0066.309] CloseHandle (hObject=0x200) returned 1 [0066.311] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.0.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy4wLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy4wln2t3a99.0ilfzr")) returned 0 [0066.319] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy4wLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy4wln2t3a99.0ilfzr")) returned 0x20 [0066.319] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 0x7d2cd8 [0066.319] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8512127a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7b6, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="DeploymentConfig.0.xml", cAlternateFileName="DEPLOY~1.XML")) returned 0 [0066.319] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0066.319] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.0.xml")) returned 1 [0066.320] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.0.xml")) returned 0xffffffff [0066.320] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 1 [0066.321] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.1.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0066.321] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy44Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy44ln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0066.321] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7b4 [0066.321] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0066.322] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0066.431] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7b4, lpNumberOfBytesRead=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19f22c*=0x7b4, lpOverlapped=0x0) returned 1 [0066.433] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19f22c*=0x7c0, lpOverlapped=0x0) returned 1 [0066.434] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0066.457] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0066.487] CloseHandle (hObject=0x200) returned 1 [0066.487] CloseHandle (hObject=0x1f8) returned 1 [0066.488] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.1.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy44Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy44ln2t3a99.0ilfzr")) returned 0 [0066.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy44Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy44ln2t3a99.0ilfzr")) returned 0x20 [0066.489] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 0x7d2ad8 [0066.489] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xfa011b19, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x7b4, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="DeploymentConfig.1.xml", cAlternateFileName="DEPLOY~3.XML")) returned 0 [0066.489] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0066.489] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.1.xml")) returned 1 [0066.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.1.xml")) returned 0xffffffff [0066.490] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 1 [0066.490] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.2.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0066.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy4yLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy4yln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0066.491] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x566 [0066.491] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0066.491] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0066.602] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x566, lpNumberOfBytesRead=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19f22c*=0x566, lpOverlapped=0x0) returned 1 [0066.604] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19f22c*=0x570, lpOverlapped=0x0) returned 1 [0066.605] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0066.666] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0066.677] CloseHandle (hObject=0x1f8) returned 1 [0066.677] CloseHandle (hObject=0x200) returned 1 [0066.678] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.2.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy4yLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy4yln2t3a99.0ilfzr")) returned 0 [0066.679] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\RGVw3G953WV6dENv3mZpZy4yLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\rgvw3g953wv6denv3mzpzy4yln2t3a99.0ilfzr")) returned 0x20 [0066.679] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 0x7d2f58 [0066.679] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c4413a9, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x566, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="DeploymentConfig.2.xml", cAlternateFileName="DEPLOY~2.XML")) returned 0 [0066.679] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0066.679] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.2.xml")) returned 1 [0066.680] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\deploymentconfig.2.xml")) returned 0xffffffff [0066.680] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0066.680] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x18, cFileName=".", cAlternateFileName="")) returned 0x7d2a18 [0066.680] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x18, cFileName="..", cAlternateFileName="")) returned 1 [0066.680] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x18, cFileName="Catalog", cAlternateFileName="")) returned 1 [0066.680] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec98, dwReserved1=0x1000, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0066.681] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec98, dwReserved1=0x1000, cFileName="..", cAlternateFileName="")) returned 1 [0066.681] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec98, dwReserved1=0x1000, cFileName="Packages", cAlternateFileName="")) returned 1 [0066.681] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0066.681] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0066.681] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0066.681] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x19eb14 | out: lpFindFileData=0x19eb14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0066.681] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eb14 | out: lpFindFileData=0x19eb14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.682] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eb14 | out: lpFindFileData=0x19eb14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 1 [0066.682] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*.*", lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d3018 [0066.682] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0066.682] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfiguration.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0066.682] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0066.682] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RGVw3G953WV6dENv3mZpZ3VyYXRp32467G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\rgvw3g953wv6denv3mzpz3vyyxrp32467g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0066.683] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x266 [0066.683] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0066.683] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0066.766] ReadFile (in: hFile=0x20c, lpBuffer=0x238000e, nNumberOfBytesToRead=0x266, lpNumberOfBytesRead=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19e624*=0x266, lpOverlapped=0x0) returned 1 [0066.767] WriteFile (in: hFile=0x210, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19e624*=0x270, lpOverlapped=0x0) returned 1 [0066.768] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0066.791] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0066.810] CloseHandle (hObject=0x20c) returned 1 [0066.810] CloseHandle (hObject=0x210) returned 1 [0066.820] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RGVw3G953WV6dENv3mZpZ3VyYXRp32467G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\rgvw3g953wv6denv3mzpz3vyyxrp32467g1s.0ilfzr")) returned 0 [0066.820] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\RGVw3G953WV6dENv3mZpZ3VyYXRp32467G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\rgvw3g953wv6denv3mzpz3vyyxrp32467g1s.0ilfzr")) returned 0x20 [0066.820] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="DeploymentConfiguration.xml", cAlternateFileName="DEPLOY~1.XML")) returned 0x7d3098 [0066.821] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="DeploymentConfiguration.xml", cAlternateFileName="DEPLOY~1.XML")) returned 0 [0066.821] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0066.821] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml")) returned 1 [0066.823] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml")) returned 0xffffffff [0066.823] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest.xml", cAlternateFileName="")) returned 1 [0066.823] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0066.823] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\TWF61WZlc3Q67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\twf61wzlc3q67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0066.823] GetFileSize (in: hFile=0x210, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5ab2f7 [0066.823] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0066.824] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0066.975] ReadFile (in: hFile=0x210, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4ffffe, lpNumberOfBytesRead=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19e624*=0x4ffffe, lpOverlapped=0x0) returned 1 [0067.240] WriteFile (in: hFile=0x20c, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x500000, lpNumberOfBytesWritten=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19e624*=0x500000, lpOverlapped=0x0) returned 1 [0067.354] ReadFile (in: hFile=0x210, lpBuffer=0x238000c, nNumberOfBytesToRead=0xab2f9, lpNumberOfBytesRead=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesRead=0x19e624*=0xab2f9, lpOverlapped=0x0) returned 1 [0067.379] WriteFile (in: hFile=0x20c, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xab300, lpNumberOfBytesWritten=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19e624*=0xab300, lpOverlapped=0x0) returned 1 [0067.395] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0067.418] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0067.521] CloseHandle (hObject=0x210) returned 1 [0067.522] CloseHandle (hObject=0x20c) returned 1 [0067.889] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\TWF61WZlc3Q67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\twf61wzlc3q67g1s.0ilfzr")) returned 0 [0067.889] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\TWF61WZlc3Q67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\twf61wzlc3q67g1s.0ilfzr")) returned 0x20 [0067.889] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Manifest.xml", cAlternateFileName="")) returned 0x7d2b98 [0067.890] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Manifest.xml", cAlternateFileName="")) returned 0 [0067.890] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0067.890] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml")) returned 1 [0067.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml")) returned 0xffffffff [0067.890] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="UserDeploymentConfiguration.xml", cAlternateFileName="USERDE~1.XML")) returned 1 [0067.890] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0067.891] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\VXNlc5RlcG4v7W1l3nRD325m1Wd1cmF01W96Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\vxnlc5rlcg4v7w1l3nrd325m1wd1cmf01w96ln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0067.891] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x266 [0067.891] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0067.891] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0067.993] ReadFile (in: hFile=0x20c, lpBuffer=0x238000e, nNumberOfBytesToRead=0x266, lpNumberOfBytesRead=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19e624*=0x266, lpOverlapped=0x0) returned 1 [0067.993] WriteFile (in: hFile=0x210, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19e624*=0x270, lpOverlapped=0x0) returned 1 [0067.995] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0068.027] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0068.038] CloseHandle (hObject=0x20c) returned 1 [0068.039] CloseHandle (hObject=0x210) returned 1 [0068.040] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\VXNlc5RlcG4v7W1l3nRD325m1Wd1cmF01W96Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\vxnlc5rlcg4v7w1l3nrd325m1wd1cmf01w96ln2t3a99.0ilfzr")) returned 0 [0068.040] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\VXNlc5RlcG4v7W1l3nRD325m1Wd1cmF01W96Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\vxnlc5rlcg4v7w1l3nrd325m1wd1cmf01w96ln2t3a99.0ilfzr")) returned 0x20 [0068.040] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UserDeploymentConfiguration.xml", cAlternateFileName="USERDE~1.XML")) returned 0x7d2d18 [0068.041] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UserDeploymentConfiguration.xml", cAlternateFileName="USERDE~1.XML")) returned 0 [0068.041] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0068.041] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml")) returned 1 [0068.042] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml")) returned 0xffffffff [0068.042] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 1 [0068.042] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x210 [0068.043] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\VXNlc5123mlmZXN0Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\vxnlc5123mlmzxn0ln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x20c [0068.043] GetFileSize (in: hFile=0x210, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x38e9a8 [0068.043] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0068.044] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0068.132] ReadFile (in: hFile=0x210, lpBuffer=0x238000e, nNumberOfBytesToRead=0x38e9a8, lpNumberOfBytesRead=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19e624*=0x38e9a8, lpOverlapped=0x0) returned 1 [0069.704] WriteFile (in: hFile=0x20c, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x38e9b0, lpNumberOfBytesWritten=0x19e624, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19e624*=0x38e9b0, lpOverlapped=0x0) returned 1 [0069.825] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0069.976] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0069.987] CloseHandle (hObject=0x210) returned 1 [0069.991] CloseHandle (hObject=0x20c) returned 1 [0070.516] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\VXNlc5123mlmZXN0Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\vxnlc5123mlmzxn0ln2t3a99.0ilfzr")) returned 0 [0070.516] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\VXNlc5123mlmZXN0Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\vxnlc5123mlmzxn0ln2t3a99.0ilfzr")) returned 0x20 [0070.517] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 0x7d2998 [0070.517] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e520 | out: lpFindFileData=0x19e520*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 0 [0070.517] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0070.517] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml")) returned 1 [0070.518] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml")) returned 0xffffffff [0070.518] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e8ac | out: lpFindFileData=0x19e8ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 0 [0070.518] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0070.518] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eb14 | out: lpFindFileData=0x19eb14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 0 [0070.518] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0070.518] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0070.518] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0070.518] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec98, dwReserved1=0x1000, cFileName="Packages", cAlternateFileName="")) returned 0 [0070.519] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0070.519] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6567616b, dwReserved1=0x73, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0070.519] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName=".", cAlternateFileName="")) returned 0x7d2d18 [0070.519] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName="..", cAlternateFileName="")) returned 1 [0070.519] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0070.519] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38303338, dwReserved1=0x392d3743, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0070.519] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38303338, dwReserved1=0x392d3743, cFileName="..", cAlternateFileName="")) returned 1 [0070.519] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38303338, dwReserved1=0x392d3743, cFileName="..", cAlternateFileName="")) returned 0 [0070.519] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0070.519] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0070.519] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0070.520] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6567616b, dwReserved1=0x73, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0070.520] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0070.520] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61726765, dwReserved1=0x6e6f6974, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0070.520] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75637472, dwReserved1=0x63614274, cFileName=".", cAlternateFileName="")) returned 0x7d2ad8 [0070.522] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75637472, dwReserved1=0x63614274, cFileName="..", cAlternateFileName="")) returned 1 [0070.522] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x75637472, dwReserved1=0x63614274, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1 [0070.523] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName=".", cAlternateFileName="")) returned 0x7d3098 [0070.523] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName="..", cAlternateFileName="")) returned 1 [0070.523] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0070.523] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000003, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0070.525] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="..", cAlternateFileName="")) returned 1 [0070.525] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0070.528] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0070.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0070.529] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5bec [0070.529] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0070.530] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0070.669] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5bec, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x5bec, lpOverlapped=0x0) returned 1 [0070.672] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5bf0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x5bf0, lpOverlapped=0x0) returned 1 [0070.673] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0070.697] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0070.713] CloseHandle (hObject=0x204) returned 1 [0070.713] CloseHandle (hObject=0x208) returned 1 [0070.715] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0 [0070.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\TWFzdGVyRGVzY3JpcHRvci5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\twfzdgvyrgvzy3jpchrvci5l3i11cy543ww9.0ilfzr")) returned 0x20 [0070.715] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2d58 [0070.715] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0070.715] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0070.716] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml")) returned 1 [0070.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml")) returned 0xffffffff [0070.717] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0070.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\s321033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\s321033.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0070.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\czMyMTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\czmymtazmy5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0070.717] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0070.717] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0070.718] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0070.793] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x66, lpOverlapped=0x0) returned 1 [0070.800] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x70, lpOverlapped=0x0) returned 1 [0070.801] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0070.825] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0070.836] CloseHandle (hObject=0x208) returned 1 [0070.836] CloseHandle (hObject=0x204) returned 1 [0070.837] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\s321033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\s321033.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\czMyMTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\czmymtazmy5oyxno.0ilfzr")) returned 0 [0070.838] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\czMyMTAzMy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\czmymtazmy5oyxno.0ilfzr")) returned 0x20 [0070.838] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\s321033.hash", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 0x7d2918 [0070.838] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 0 [0070.838] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0070.838] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\s321033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\s321033.hash")) returned 1 [0070.839] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\s321033.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\s321033.hash")) returned 0xffffffff [0070.839] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0070.840] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0070.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLlBsYXRm33JtL5N13HR1cmU63WF6Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftllbsyxrm33jtl5n13hr1cmu63wf6ln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0070.845] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1dff67 [0070.845] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0070.846] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0070.968] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1dff67, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1dff67, lpOverlapped=0x0) returned 1 [0071.043] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1dff70, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1dff70, lpOverlapped=0x0) returned 1 [0071.079] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0071.104] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0071.115] CloseHandle (hObject=0x204) returned 1 [0071.115] CloseHandle (hObject=0x208) returned 1 [0071.222] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLlBsYXRm33JtL5N13HR1cmU63WF6Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftllbsyxrm33jtl5n13hr1cmu63wf6ln2t3a99.0ilfzr")) returned 0 [0071.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLlBsYXRm33JtL5N13HR1cmU63WF6Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftllbsyxrm33jtl5n13hr1cmu63wf6ln2t3a99.0ilfzr")) returned 0x20 [0071.223] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 0x7d2c98 [0071.223] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 0 [0071.223] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0071.223] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml")) returned 1 [0071.231] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml")) returned 0xffffffff [0071.231] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0071.232] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0071.232] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0071.232] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80 [0071.232] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0071.232] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0071.321] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x80, lpOverlapped=0x0) returned 1 [0071.322] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x90, lpOverlapped=0x0) returned 1 [0071.323] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0071.356] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0071.368] CloseHandle (hObject=0x208) returned 1 [0071.368] CloseHandle (hObject=0x204) returned 1 [0071.371] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5oyxno.0ilfzr")) returned 0 [0071.371] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5oyxno.0ilfzr")) returned 0x20 [0071.371] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.hash", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 0x7d2998 [0071.372] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 0 [0071.372] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0071.372] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.hash")) returned 1 [0071.373] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.hash")) returned 0xffffffff [0071.373] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x7ca190, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0071.373] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0071.374] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5tyw46zgf0.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0071.374] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x108693 [0071.374] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0071.375] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0071.559] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x108693, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x108693, lpOverlapped=0x0) returned 1 [0071.595] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1086a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1086a0, lpOverlapped=0x0) returned 1 [0071.618] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0071.655] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0071.666] CloseHandle (hObject=0x204) returned 1 [0071.666] CloseHandle (hObject=0x208) returned 1 [0071.692] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5tyw46zgf0.0ilfzr")) returned 0 [0071.692] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5tyw46zgf0.0ilfzr")) returned 0x20 [0071.692] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2fd8 [0071.692] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0071.692] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0071.693] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat")) returned 1 [0071.694] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat")) returned 0xffffffff [0071.694] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x7ca190, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0071.694] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0071.694] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0071.694] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0071.696] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.696] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0071.696] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0071.696] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0071.696] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5b31 [0071.696] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0071.697] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0071.802] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5b31, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x5b31, lpOverlapped=0x0) returned 1 [0071.804] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5b40, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x5b40, lpOverlapped=0x0) returned 1 [0071.805] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0071.830] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0071.841] CloseHandle (hObject=0x208) returned 1 [0071.841] CloseHandle (hObject=0x204) returned 1 [0071.842] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0 [0071.843] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\TWFzdGVyRGVzY3JpcHRvci54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\twfzdgvyrgvzy3jpchrvci54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0071.843] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2d58 [0071.843] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0071.843] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0071.843] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml")) returned 1 [0071.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml")) returned 0xffffffff [0071.844] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0071.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\s320.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\s320.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0071.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\czMyMC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\czmymc5oyxno.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0071.846] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x66 [0071.846] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0071.846] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0071.973] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x66, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x66, lpOverlapped=0x0) returned 1 [0071.975] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x70, lpOverlapped=0x0) returned 1 [0071.980] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0072.005] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0072.028] CloseHandle (hObject=0x204) returned 1 [0072.028] CloseHandle (hObject=0x208) returned 1 [0072.030] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\s320.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\s320.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\czMyMC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\czmymc5oyxno.0ilfzr")) returned 0 [0072.032] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\czMyMC5oYXNo.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\czmymc5oyxno.0ilfzr")) returned 0x20 [0072.032] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\s320.hash", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x7c86f8, dwReserved1=0x7e3350, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 0x7d2f58 [0072.032] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x7c86f8, dwReserved1=0x7e3350, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 0 [0072.032] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0072.032] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\s320.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\s320.hash")) returned 1 [0072.033] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\s320.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\s320.hash")) returned 0xffffffff [0072.033] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0072.034] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0072.035] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLlBsYXRm33JtLngt3m96ZS5tYW467G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftllbsyxrm33jtlngt3m96zs5tyw467g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0072.035] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7e0a5c [0072.035] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0072.036] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0072.160] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4ffffe, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x4ffffe, lpOverlapped=0x0) returned 1 [0072.469] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x500000, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x500000, lpOverlapped=0x0) returned 1 [0072.595] ReadFile (in: hFile=0x208, lpBuffer=0x238000c, nNumberOfBytesToRead=0x2e0a5e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesRead=0x19eaf4*=0x2e0a5e, lpOverlapped=0x0) returned 1 [0072.663] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0a60, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0a60, lpOverlapped=0x0) returned 1 [0072.734] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0072.757] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0072.769] CloseHandle (hObject=0x208) returned 1 [0072.769] CloseHandle (hObject=0x204) returned 1 [0073.090] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLlBsYXRm33JtLngt3m96ZS5tYW467G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftllbsyxrm33jtlngt3m96zs5tyw467g1s.0ilfzr")) returned 0 [0073.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLlBsYXRm33JtLngt3m96ZS5tYW467G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftllbsyxrm33jtlngt3m96zs5tyw467g1s.0ilfzr")) returned 0x20 [0073.091] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 0x7d2998 [0073.091] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 0 [0073.091] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0073.091] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml")) returned 1 [0073.092] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml")) returned 0xffffffff [0073.092] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0073.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.hash"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0073.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU61GFz1A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu61gfz1a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0073.093] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80 [0073.093] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0073.093] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0073.170] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x80, lpOverlapped=0x0) returned 1 [0073.177] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x90, lpOverlapped=0x0) returned 1 [0073.178] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0073.201] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0073.212] CloseHandle (hObject=0x204) returned 1 [0073.212] CloseHandle (hObject=0x208) returned 1 [0073.217] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.hash"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU61GFz1A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu61gfz1a99.0ilfzr")) returned 0 [0073.217] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU61GFz1A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu61gfz1a99.0ilfzr")) returned 0x20 [0073.217] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.hash", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 0x7d3018 [0073.218] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 0 [0073.218] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0073.218] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.hash")) returned 1 [0073.219] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.hash" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.hash")) returned 0xffffffff [0073.219] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0073.219] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0073.222] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu63wf6lmr2da99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0073.223] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x460b47 [0073.223] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0073.223] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0073.299] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x460b47, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x460b47, lpOverlapped=0x0) returned 1 [0073.447] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x460b50, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x460b50, lpOverlapped=0x0) returned 1 [0073.691] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0073.736] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0073.747] CloseHandle (hObject=0x208) returned 1 [0073.747] CloseHandle (hObject=0x204) returned 1 [0073.884] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0 [0073.885] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0x20 [0073.885] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2918 [0073.885] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0073.885] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0073.885] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat")) returned 1 [0073.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat")) returned 0xffffffff [0073.890] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0073.890] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0073.890] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0073.890] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0073.890] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1 [0073.890] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName=".", cAlternateFileName="")) returned 0x7d3098 [0073.926] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName="..", cAlternateFileName="")) returned 1 [0073.926] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0073.926] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000003, cFileName=".", cAlternateFileName="")) returned 0x7d2b98 [0073.928] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="..", cAlternateFileName="")) returned 1 [0073.928] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0073.928] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0073.929] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5tyw46zgf0.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0073.930] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x108693 [0073.930] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0073.930] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0074.005] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x108693, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x108693, lpOverlapped=0x0) returned 1 [0074.049] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1086a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1086a0, lpOverlapped=0x0) returned 1 [0074.082] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0074.109] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0074.120] CloseHandle (hObject=0x204) returned 1 [0074.120] CloseHandle (hObject=0x208) returned 1 [0074.141] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5tyw46zgf0.0ilfzr")) returned 0 [0074.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\c3RyZWFtLng4Ni5l3i11cy5tYW46ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\c3ryzwftlng4ni5l3i11cy5tyw46zgf0.0ilfzr")) returned 0x20 [0074.142] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2d58 [0074.142] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0074.142] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0074.142] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat")) returned 1 [0074.144] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat")) returned 0xffffffff [0074.144] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x3000003, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0074.144] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0074.144] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0074.144] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0074.151] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.151] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0074.151] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0074.152] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu63wf6lmr2da99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0074.152] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x460b47 [0074.152] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0074.153] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0074.261] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x460b47, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x460b47, lpOverlapped=0x0) returned 1 [0074.507] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x460b50, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x460b50, lpOverlapped=0x0) returned 1 [0074.618] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0074.643] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0074.654] CloseHandle (hObject=0x208) returned 1 [0074.654] CloseHandle (hObject=0x204) returned 1 [0074.944] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0 [0074.944] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\c3RyZWFtLng4Ni54LW5v3mU63WF6LmR2dA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\c3ryzwftlng4ni54lw5v3mu63wf6lmr2da99.0ilfzr")) returned 0x20 [0074.944] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0x7d2b18 [0074.944] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0074.944] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0074.945] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat")) returned 1 [0074.949] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat")) returned 0xffffffff [0074.949] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0074.949] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0074.949] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e6d6165, dwReserved1=0x2e363878, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0074.949] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0074.950] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 0 [0074.950] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0074.950] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30333738, dwReserved1=0x32392d32, cFileName="UserData", cAlternateFileName="")) returned 1 [0074.950] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0074.950] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName="..", cAlternateFileName="")) returned 1 [0074.950] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName="..", cAlternateFileName="")) returned 0 [0074.950] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0074.950] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30333738, dwReserved1=0x32392d32, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0074.950] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName=".", cAlternateFileName="")) returned 0x7d2ad8 [0074.960] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName="..", cAlternateFileName="")) returned 1 [0074.961] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x2e656e6f, dwReserved1=0x63613631, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0074.961] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0074.962] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0074.972] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x44e23 [0074.972] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0074.972] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0075.069] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x44e23, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x44e23, lpOverlapped=0x0) returned 1 [0075.089] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x44e30, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x44e30, lpOverlapped=0x0) returned 1 [0075.094] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0075.117] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0075.177] CloseHandle (hObject=0x1f8) returned 1 [0075.178] CloseHandle (hObject=0x1fc) returned 1 [0075.184] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr")) returned 0 [0075.184] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr")) returned 0x20 [0075.184] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 0x7d2f58 [0075.184] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 0 [0075.184] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0075.185] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man")) returned 1 [0075.188] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man")) returned 0xffffffff [0075.188] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0075.188] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0075.188] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0075.188] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x91f0 [0075.188] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0075.189] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0075.361] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x91f0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x91f0, lpOverlapped=0x0) returned 1 [0075.363] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x9200, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x9200, lpOverlapped=0x0) returned 1 [0075.365] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0075.390] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0075.427] CloseHandle (hObject=0x1fc) returned 1 [0075.427] CloseHandle (hObject=0x1f8) returned 1 [0075.429] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0 [0075.429] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0x20 [0075.429] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 0x7d2f58 [0075.430] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 0 [0075.430] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0075.430] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml")) returned 1 [0075.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml")) returned 0xffffffff [0075.431] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0075.431] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0075.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0075.432] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe71c [0075.432] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0075.432] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0075.528] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xe71c, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xe71c, lpOverlapped=0x0) returned 1 [0075.530] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xe720, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xe720, lpOverlapped=0x0) returned 1 [0075.532] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0075.556] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0075.583] CloseHandle (hObject=0x1f8) returned 1 [0075.584] CloseHandle (hObject=0x1fc) returned 1 [0075.586] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0075.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0075.586] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 0x7d2f58 [0075.586] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 0 [0075.587] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0075.587] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml")) returned 1 [0075.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml")) returned 0xffffffff [0075.589] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0075.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0075.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0075.590] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7fa [0075.590] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0075.590] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0075.776] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7fa, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x7fa, lpOverlapped=0x0) returned 1 [0075.777] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x800, lpOverlapped=0x0) returned 1 [0075.779] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0075.841] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0075.852] CloseHandle (hObject=0x1fc) returned 1 [0075.852] CloseHandle (hObject=0x1f8) returned 1 [0075.854] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0075.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0075.854] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 0x7d2d58 [0075.855] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 0 [0075.855] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0075.855] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml")) returned 1 [0075.856] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml")) returned 0xffffffff [0075.856] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1 [0075.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0075.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0075.856] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3f14 [0075.856] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0075.857] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0075.988] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3f14, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x3f14, lpOverlapped=0x0) returned 1 [0075.990] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3f20, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x3f20, lpOverlapped=0x0) returned 1 [0075.991] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0076.050] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0076.062] CloseHandle (hObject=0x1f8) returned 1 [0076.062] CloseHandle (hObject=0x1fc) returned 1 [0076.063] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0 [0076.064] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0x20 [0076.064] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 0x7d2f58 [0076.064] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 0 [0076.064] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0076.064] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml")) returned 1 [0076.065] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml")) returned 0xffffffff [0076.065] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0076.066] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0076.066] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0076.066] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x265a [0076.066] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0076.067] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0076.150] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x265a, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x265a, lpOverlapped=0x0) returned 1 [0076.152] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2660, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2660, lpOverlapped=0x0) returned 1 [0076.153] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0076.176] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0076.191] CloseHandle (hObject=0x1fc) returned 1 [0076.191] CloseHandle (hObject=0x1f8) returned 1 [0076.192] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0076.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0076.193] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 0x7d2998 [0076.193] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 0 [0076.193] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0076.193] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml")) returned 1 [0076.194] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml")) returned 0xffffffff [0076.194] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1 [0076.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0076.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0076.195] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39d9c [0076.195] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0076.196] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0076.307] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x39d9c, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x39d9c, lpOverlapped=0x0) returned 1 [0076.312] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x39da0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x39da0, lpOverlapped=0x0) returned 1 [0076.317] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0076.342] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0076.354] CloseHandle (hObject=0x1f8) returned 1 [0076.354] CloseHandle (hObject=0x1fc) returned 1 [0076.359] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0 [0076.360] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0076.360] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 0x7d2998 [0076.360] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 0 [0076.360] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0076.360] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml")) returned 1 [0076.362] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml")) returned 0xffffffff [0076.363] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0076.363] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0076.363] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0076.364] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8f70 [0076.364] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0076.364] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0076.445] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8f70, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8f70, lpOverlapped=0x0) returned 1 [0076.447] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8f80, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8f80, lpOverlapped=0x0) returned 1 [0076.449] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0076.472] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0076.485] CloseHandle (hObject=0x1fc) returned 1 [0076.485] CloseHandle (hObject=0x1f8) returned 1 [0076.487] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0 [0076.487] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0x20 [0076.488] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 0x7d3098 [0076.488] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 0 [0076.488] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0076.488] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml")) returned 1 [0076.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml")) returned 0xffffffff [0076.489] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1 [0076.489] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0076.489] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0076.490] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8f8e [0076.490] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0076.490] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0076.598] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8f8e, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8f8e, lpOverlapped=0x0) returned 1 [0076.609] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8fa0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8fa0, lpOverlapped=0x0) returned 1 [0076.611] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0076.634] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0076.644] CloseHandle (hObject=0x1f8) returned 1 [0076.645] CloseHandle (hObject=0x1fc) returned 1 [0076.646] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0 [0076.647] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0x20 [0076.647] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 0x7d2918 [0076.647] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 0 [0076.647] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0076.647] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml")) returned 1 [0076.648] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml")) returned 0xffffffff [0076.648] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0076.648] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0076.651] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0076.652] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x180e [0076.652] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0076.652] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0076.803] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x180e, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x180e, lpOverlapped=0x0) returned 1 [0076.805] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1820, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1820, lpOverlapped=0x0) returned 1 [0076.807] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0076.875] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0076.886] CloseHandle (hObject=0x1fc) returned 1 [0076.886] CloseHandle (hObject=0x1f8) returned 1 [0076.888] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0076.888] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0076.888] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 0x7d2b18 [0076.889] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 0 [0076.889] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0076.889] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml")) returned 1 [0076.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml")) returned 0xffffffff [0076.890] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1 [0076.890] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0076.890] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0076.890] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1979c [0076.891] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0076.891] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0077.126] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1979c, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1979c, lpOverlapped=0x0) returned 1 [0077.130] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x197a0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x197a0, lpOverlapped=0x0) returned 1 [0077.132] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0077.211] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.222] CloseHandle (hObject=0x1f8) returned 1 [0077.222] CloseHandle (hObject=0x1fc) returned 1 [0077.225] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0077.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0077.226] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 0x7d2a58 [0077.226] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 0 [0077.226] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0077.226] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml")) returned 1 [0077.228] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml")) returned 0xffffffff [0077.228] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0077.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0077.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0077.229] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5b94 [0077.229] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0077.229] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0077.556] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5b94, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5b94, lpOverlapped=0x0) returned 1 [0077.560] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5ba0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x5ba0, lpOverlapped=0x0) returned 1 [0077.561] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0077.631] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.642] CloseHandle (hObject=0x1fc) returned 1 [0077.642] CloseHandle (hObject=0x1f8) returned 1 [0077.644] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0077.644] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0077.644] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 0x7d3098 [0077.644] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 0 [0077.645] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0077.645] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml")) returned 1 [0077.646] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml")) returned 0xffffffff [0077.646] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0077.646] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0077.647] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0077.647] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6b4a [0077.647] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0077.647] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0077.879] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6b4a, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6b4a, lpOverlapped=0x0) returned 1 [0077.883] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6b50, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6b50, lpOverlapped=0x0) returned 1 [0077.884] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0077.955] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0077.966] CloseHandle (hObject=0x1f8) returned 1 [0077.966] CloseHandle (hObject=0x1fc) returned 1 [0077.967] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0 [0077.968] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0x20 [0077.968] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 0x7d2f58 [0077.968] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 0 [0077.968] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0077.968] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml")) returned 1 [0078.005] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml")) returned 0xffffffff [0078.005] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0078.005] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0078.006] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0078.006] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f3f4 [0078.006] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0078.006] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0078.205] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4f3f4, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4f3f4, lpOverlapped=0x0) returned 1 [0078.213] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4f400, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4f400, lpOverlapped=0x0) returned 1 [0078.220] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0078.242] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.303] CloseHandle (hObject=0x1fc) returned 1 [0078.303] CloseHandle (hObject=0x1f8) returned 1 [0078.309] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0078.310] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0078.310] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 0x7d2fd8 [0078.310] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 0 [0078.310] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0078.310] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml")) returned 1 [0078.314] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml")) returned 0xffffffff [0078.314] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0078.314] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0078.315] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0078.315] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x19870 [0078.315] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0078.316] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0078.572] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x19870, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x19870, lpOverlapped=0x0) returned 1 [0078.576] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x19880, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x19880, lpOverlapped=0x0) returned 1 [0078.578] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0078.601] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.651] CloseHandle (hObject=0x1f8) returned 1 [0078.652] CloseHandle (hObject=0x1fc) returned 1 [0078.655] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0078.655] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0078.655] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 0x7d2b18 [0078.655] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 0 [0078.655] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0078.656] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml")) returned 1 [0078.657] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml")) returned 0xffffffff [0078.658] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0078.658] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0078.658] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0078.659] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7fa [0078.659] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0078.659] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0078.837] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7fa, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x7fa, lpOverlapped=0x0) returned 1 [0078.839] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x800, lpOverlapped=0x0) returned 1 [0078.840] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0078.991] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.005] CloseHandle (hObject=0x1fc) returned 1 [0079.006] CloseHandle (hObject=0x1f8) returned 1 [0079.010] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0079.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0079.012] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 0x7d3018 [0079.012] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 0 [0079.012] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0079.012] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml")) returned 1 [0079.013] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml")) returned 0xffffffff [0079.013] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0079.014] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0079.014] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0079.014] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17b3c [0079.014] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0079.015] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0079.272] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x17b3c, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x17b3c, lpOverlapped=0x0) returned 1 [0079.275] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x17b40, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x17b40, lpOverlapped=0x0) returned 1 [0079.278] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0079.377] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0079.388] CloseHandle (hObject=0x1f8) returned 1 [0079.388] CloseHandle (hObject=0x1fc) returned 1 [0079.391] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0079.392] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0079.392] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 0x7d2f58 [0079.392] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 0 [0079.392] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0079.392] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml")) returned 1 [0079.394] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml")) returned 0xffffffff [0079.394] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0079.394] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0079.394] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0079.396] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4a4a [0079.396] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0079.396] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0079.804] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4a4a, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4a4a, lpOverlapped=0x0) returned 1 [0079.806] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4a50, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4a50, lpOverlapped=0x0) returned 1 [0079.807] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0080.004] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.015] CloseHandle (hObject=0x1fc) returned 1 [0080.015] CloseHandle (hObject=0x1f8) returned 1 [0080.018] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0080.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0080.018] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 0x7d2fd8 [0080.018] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 0 [0080.019] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0080.019] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml")) returned 1 [0080.020] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml")) returned 0xffffffff [0080.020] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0080.020] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0080.112] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0080.112] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5f6 [0080.112] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0080.112] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0080.232] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5f6, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5f6, lpOverlapped=0x0) returned 1 [0080.242] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x600, lpOverlapped=0x0) returned 1 [0080.243] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0080.303] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.314] CloseHandle (hObject=0x1f8) returned 1 [0080.315] CloseHandle (hObject=0x1fc) returned 1 [0080.316] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0 [0080.317] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0x20 [0080.317] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 0x7d2a98 [0080.317] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 0 [0080.317] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0080.317] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml")) returned 1 [0080.318] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml")) returned 0xffffffff [0080.318] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0080.318] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0080.318] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0080.319] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b28 [0080.319] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0080.319] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0080.498] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b28, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2b28, lpOverlapped=0x0) returned 1 [0080.500] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b30, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2b30, lpOverlapped=0x0) returned 1 [0080.501] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0080.608] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.619] CloseHandle (hObject=0x1fc) returned 1 [0080.619] CloseHandle (hObject=0x1f8) returned 1 [0080.620] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0080.621] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0080.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 0x7d2b18 [0080.621] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 0 [0080.621] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0080.621] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml")) returned 1 [0080.622] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml")) returned 0xffffffff [0080.622] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0080.622] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0080.622] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0080.627] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x906 [0080.627] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0080.627] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0080.866] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x906, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x906, lpOverlapped=0x0) returned 1 [0080.867] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x910, lpOverlapped=0x0) returned 1 [0080.868] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0080.952] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0080.963] CloseHandle (hObject=0x1f8) returned 1 [0080.963] CloseHandle (hObject=0x1fc) returned 1 [0080.964] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0 [0080.965] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0080.965] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 0x7d2b18 [0080.965] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 0 [0080.965] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0080.965] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml")) returned 1 [0080.966] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml")) returned 0xffffffff [0080.966] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0080.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0080.967] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0080.967] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b8a [0080.967] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0080.968] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0081.199] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b8a, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2b8a, lpOverlapped=0x0) returned 1 [0081.202] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b90, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2b90, lpOverlapped=0x0) returned 1 [0081.203] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0081.275] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.286] CloseHandle (hObject=0x1fc) returned 1 [0081.286] CloseHandle (hObject=0x1f8) returned 1 [0081.288] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0 [0081.288] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0x20 [0081.288] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 0x7d3098 [0081.288] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 0 [0081.288] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0081.289] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml")) returned 1 [0081.290] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml")) returned 0xffffffff [0081.290] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0081.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0081.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0081.290] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17194 [0081.290] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0081.291] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0081.467] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x17194, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x17194, lpOverlapped=0x0) returned 1 [0081.471] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x171a0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x171a0, lpOverlapped=0x0) returned 1 [0081.473] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0081.535] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.547] CloseHandle (hObject=0x1f8) returned 1 [0081.547] CloseHandle (hObject=0x1fc) returned 1 [0081.551] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0081.551] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0081.552] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 0x7d2f58 [0081.552] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 0 [0081.552] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0081.552] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml")) returned 1 [0081.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml")) returned 0xffffffff [0081.553] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0081.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0081.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0081.554] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17984 [0081.555] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0081.555] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0081.687] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x17984, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x17984, lpOverlapped=0x0) returned 1 [0081.690] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x17990, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x17990, lpOverlapped=0x0) returned 1 [0081.693] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0081.725] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0081.736] CloseHandle (hObject=0x1fc) returned 1 [0081.736] CloseHandle (hObject=0x1f8) returned 1 [0081.739] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0081.740] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0081.740] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 0x7d2f58 [0081.740] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 0 [0081.740] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0081.740] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml")) returned 1 [0081.741] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml")) returned 0xffffffff [0081.742] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0081.742] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0081.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0081.743] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xafddc [0081.743] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0081.743] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0081.982] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xafddc, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xafddc, lpOverlapped=0x0) returned 1 [0081.999] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xafde0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xafde0, lpOverlapped=0x0) returned 1 [0082.012] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0082.047] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.058] CloseHandle (hObject=0x1f8) returned 1 [0082.058] CloseHandle (hObject=0x1fc) returned 1 [0082.072] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0082.081] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0082.081] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 0x7d3098 [0082.081] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 0 [0082.081] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0082.081] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml")) returned 1 [0082.088] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml")) returned 0xffffffff [0082.088] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0082.088] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0082.089] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0082.089] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x195a4 [0082.089] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0082.090] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0082.184] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x195a4, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x195a4, lpOverlapped=0x0) returned 1 [0082.188] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x195b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x195b0, lpOverlapped=0x0) returned 1 [0082.190] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0082.219] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.230] CloseHandle (hObject=0x1fc) returned 1 [0082.230] CloseHandle (hObject=0x1f8) returned 1 [0082.233] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0082.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0082.234] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 0x7d2cd8 [0082.234] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 0 [0082.234] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0082.234] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml")) returned 1 [0082.236] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml")) returned 0xffffffff [0082.236] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0082.236] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0082.237] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0082.237] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x689e [0082.237] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0082.237] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0082.321] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x689e, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x689e, lpOverlapped=0x0) returned 1 [0082.323] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x68b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x68b0, lpOverlapped=0x0) returned 1 [0082.324] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0082.347] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.362] CloseHandle (hObject=0x1f8) returned 1 [0082.362] CloseHandle (hObject=0x1fc) returned 1 [0082.363] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0082.364] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0082.364] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 0x7d3098 [0082.364] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 0 [0082.364] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0082.364] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml")) returned 1 [0082.365] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml")) returned 0xffffffff [0082.365] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0082.366] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0082.368] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0082.369] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7446 [0082.369] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0082.369] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0082.476] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7446, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x7446, lpOverlapped=0x0) returned 1 [0082.479] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x7450, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x7450, lpOverlapped=0x0) returned 1 [0082.482] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0082.512] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.524] CloseHandle (hObject=0x1fc) returned 1 [0082.524] CloseHandle (hObject=0x1f8) returned 1 [0082.526] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0082.526] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0082.526] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 0x7d2998 [0082.526] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 0 [0082.527] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0082.527] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml")) returned 1 [0082.528] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml")) returned 0xffffffff [0082.528] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0082.528] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0082.528] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0082.529] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x809e [0082.529] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0082.529] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0082.607] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x809e, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x809e, lpOverlapped=0x0) returned 1 [0082.609] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x80b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x80b0, lpOverlapped=0x0) returned 1 [0082.611] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0082.635] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.681] CloseHandle (hObject=0x1f8) returned 1 [0082.682] CloseHandle (hObject=0x1fc) returned 1 [0082.684] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0082.684] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0082.685] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 0x7d2b18 [0082.685] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 0 [0082.685] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0082.685] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml")) returned 1 [0082.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml")) returned 0xffffffff [0082.687] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0082.687] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0082.687] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0082.687] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x63ae [0082.687] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0082.688] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0082.777] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x63ae, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x63ae, lpOverlapped=0x0) returned 1 [0082.779] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x63c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x63c0, lpOverlapped=0x0) returned 1 [0082.781] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0082.804] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0082.826] CloseHandle (hObject=0x1fc) returned 1 [0082.826] CloseHandle (hObject=0x1f8) returned 1 [0082.827] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0082.828] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0082.828] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 0x7d2a18 [0082.828] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 0 [0082.828] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0082.828] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml")) returned 1 [0082.829] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml")) returned 0xffffffff [0082.829] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0082.830] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0082.830] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0082.831] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5fee [0082.831] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0082.831] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0083.031] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5fee, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5fee, lpOverlapped=0x0) returned 1 [0083.040] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6000, lpOverlapped=0x0) returned 1 [0083.042] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0083.066] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.110] CloseHandle (hObject=0x1f8) returned 1 [0083.110] CloseHandle (hObject=0x1fc) returned 1 [0083.111] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr")) returned 0 [0083.112] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr")) returned 0x20 [0083.112] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 0x7d2fd8 [0083.112] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 0 [0083.112] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0083.112] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml")) returned 1 [0083.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml")) returned 0xffffffff [0083.114] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0083.114] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0083.114] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0083.114] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5fee [0083.114] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0083.115] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0083.189] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5fee, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5fee, lpOverlapped=0x0) returned 1 [0083.201] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6000, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6000, lpOverlapped=0x0) returned 1 [0083.203] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0083.226] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.237] CloseHandle (hObject=0x1fc) returned 1 [0083.237] CloseHandle (hObject=0x1f8) returned 1 [0083.238] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr")) returned 0 [0083.239] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr")) returned 0x20 [0083.239] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 0x7d29d8 [0083.239] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 0 [0083.239] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0083.239] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml")) returned 1 [0083.240] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml")) returned 0xffffffff [0083.240] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0083.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0083.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0083.241] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7fa [0083.241] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0083.241] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0083.461] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7fa, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x7fa, lpOverlapped=0x0) returned 1 [0083.466] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x800, lpOverlapped=0x0) returned 1 [0083.467] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0083.490] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.507] CloseHandle (hObject=0x1f8) returned 1 [0083.507] CloseHandle (hObject=0x1fc) returned 1 [0083.508] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0 [0083.508] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0x20 [0083.508] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 0x7d2918 [0083.509] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 0 [0083.509] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0083.509] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml")) returned 1 [0083.510] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml")) returned 0xffffffff [0083.510] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0083.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0083.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0083.511] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12e4a [0083.511] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0083.511] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0083.619] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x12e4a, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x12e4a, lpOverlapped=0x0) returned 1 [0083.623] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x12e50, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x12e50, lpOverlapped=0x0) returned 1 [0083.625] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0083.649] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.669] CloseHandle (hObject=0x1fc) returned 1 [0083.669] CloseHandle (hObject=0x1f8) returned 1 [0083.672] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0 [0083.672] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0x20 [0083.672] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 0x7d2b58 [0083.673] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 0 [0083.673] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0083.673] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml")) returned 1 [0083.674] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml")) returned 0xffffffff [0083.674] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0083.674] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0083.675] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0083.675] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3734 [0083.675] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0083.675] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0083.798] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3734, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x3734, lpOverlapped=0x0) returned 1 [0083.800] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3740, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x3740, lpOverlapped=0x0) returned 1 [0083.801] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0083.824] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0083.835] CloseHandle (hObject=0x1f8) returned 1 [0083.835] CloseHandle (hObject=0x1fc) returned 1 [0083.837] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0 [0083.837] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0x20 [0083.837] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 0x7d2c98 [0083.837] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 0 [0083.837] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0083.838] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml")) returned 1 [0083.857] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml")) returned 0xffffffff [0083.857] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0083.857] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0083.858] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0083.858] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb27ee [0083.858] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0083.858] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0083.950] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xb27ee, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xb27ee, lpOverlapped=0x0) returned 1 [0083.980] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xb2800, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xb2800, lpOverlapped=0x0) returned 1 [0083.993] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0084.018] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.029] CloseHandle (hObject=0x1fc) returned 1 [0084.029] CloseHandle (hObject=0x1f8) returned 1 [0084.051] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0 [0084.052] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0x20 [0084.052] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 0x7d2a18 [0084.052] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 0 [0084.052] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0084.052] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml")) returned 1 [0084.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml")) returned 0xffffffff [0084.069] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0084.069] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0084.070] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0084.070] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2aafe [0084.070] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0084.071] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0084.147] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2aafe, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2aafe, lpOverlapped=0x0) returned 1 [0084.160] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2ab10, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2ab10, lpOverlapped=0x0) returned 1 [0084.164] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0084.187] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.205] CloseHandle (hObject=0x1f8) returned 1 [0084.205] CloseHandle (hObject=0x1fc) returned 1 [0084.210] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0 [0084.210] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0x20 [0084.210] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 0x7d2f58 [0084.210] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 0 [0084.211] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0084.211] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml")) returned 1 [0084.213] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml")) returned 0xffffffff [0084.213] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0084.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0084.214] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0084.214] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0cb4 [0084.214] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0084.214] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0084.287] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xf0cb4, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xf0cb4, lpOverlapped=0x0) returned 1 [0084.313] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xf0cc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xf0cc0, lpOverlapped=0x0) returned 1 [0084.385] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0084.409] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.431] CloseHandle (hObject=0x1fc) returned 1 [0084.431] CloseHandle (hObject=0x1f8) returned 1 [0084.449] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0 [0084.450] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0x20 [0084.450] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 0x7d2d18 [0084.450] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 0 [0084.450] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0084.450] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml")) returned 1 [0084.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml")) returned 0xffffffff [0084.459] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0084.459] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0084.459] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0084.459] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1536e [0084.459] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0084.460] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0084.791] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1536e, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1536e, lpOverlapped=0x0) returned 1 [0084.834] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x15380, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x15380, lpOverlapped=0x0) returned 1 [0084.836] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0084.860] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0084.880] CloseHandle (hObject=0x1f8) returned 1 [0084.880] CloseHandle (hObject=0x1fc) returned 1 [0084.883] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0 [0084.883] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0x20 [0084.884] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 0x7d2b18 [0084.884] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 0 [0084.884] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0084.884] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml")) returned 1 [0084.891] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml")) returned 0xffffffff [0084.892] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0084.892] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0084.892] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0084.893] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x130fe [0084.893] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0084.893] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0084.992] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x130fe, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x130fe, lpOverlapped=0x0) returned 1 [0084.995] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x13110, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x13110, lpOverlapped=0x0) returned 1 [0084.998] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0085.021] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.049] CloseHandle (hObject=0x1fc) returned 1 [0085.049] CloseHandle (hObject=0x1f8) returned 1 [0085.052] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0 [0085.052] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0x20 [0085.052] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 0x7d2a18 [0085.053] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x90, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 0 [0085.053] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0085.053] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml")) returned 1 [0085.054] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml")) returned 0xffffffff [0085.054] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0085.054] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0085.055] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\1W50ZWdyYXRvci5l7GU9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\1w50zwdyyxrvci5l7gu9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0085.055] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12c470 [0085.055] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0085.055] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0085.129] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x12c470, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x12c470, lpOverlapped=0x0) returned 1 [0085.170] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x12c480, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x12c480, lpOverlapped=0x0) returned 1 [0085.199] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0085.222] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.242] CloseHandle (hObject=0x1f8) returned 1 [0085.242] CloseHandle (hObject=0x1fc) returned 1 [0085.268] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\1W50ZWdyYXRvci5l7GU9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\1w50zwdyyxrvci5l7gu9.0ilfzr")) returned 0 [0085.271] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\1W50ZWdyYXRvci5l7GU9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\1w50zwdyyxrvci5l7gu9.0ilfzr")) returned 0x20 [0085.271] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0x7d2b18 [0085.272] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 0 [0085.272] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0085.272] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe")) returned 1 [0085.274] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe")) returned 0xffffffff [0085.274] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0085.274] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0085.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0085.290] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xce8 [0085.290] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0085.291] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0085.432] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xce8, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xce8, lpOverlapped=0x0) returned 1 [0085.492] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xcf0, lpOverlapped=0x0) returned 1 [0085.493] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0085.517] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.539] CloseHandle (hObject=0x1fc) returned 1 [0085.539] CloseHandle (hObject=0x1f8) returned 1 [0085.541] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr")) returned 0 [0085.541] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr")) returned 0x20 [0085.541] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 0x7d29d8 [0085.542] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 0 [0085.542] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0085.542] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml")) returned 1 [0085.543] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml")) returned 0xffffffff [0085.543] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0085.544] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0085.544] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0085.545] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xca6 [0085.545] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0085.545] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0085.663] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xca6, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xca6, lpOverlapped=0x0) returned 1 [0085.754] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xcb0, lpOverlapped=0x0) returned 1 [0085.755] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0085.778] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0085.789] CloseHandle (hObject=0x1f8) returned 1 [0085.789] CloseHandle (hObject=0x1fc) returned 1 [0085.790] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr")) returned 0 [0085.791] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr")) returned 0x20 [0085.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 0x7d2f58 [0085.791] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 0 [0085.791] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0085.791] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml")) returned 1 [0086.024] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml")) returned 0xffffffff [0086.024] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0086.024] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0086.024] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\3XNvdXRp3HN0YXQ6ZXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\3xnvdxrp3hn0yxq6zxr3lm123g99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0086.024] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1b826 [0086.024] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0086.025] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0086.178] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1b826, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1b826, lpOverlapped=0x0) returned 1 [0086.433] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1b830, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1b830, lpOverlapped=0x0) returned 1 [0086.436] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0086.462] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.476] CloseHandle (hObject=0x1fc) returned 1 [0086.476] CloseHandle (hObject=0x1f8) returned 1 [0086.661] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\3XNvdXRp3HN0YXQ6ZXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\3xnvdxrp3hn0yxq6zxr3lm123g99.0ilfzr")) returned 0 [0086.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\3XNvdXRp3HN0YXQ6ZXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\3xnvdxrp3hn0yxq6zxr3lm123g99.0ilfzr")) returned 0x20 [0086.662] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x7c, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 0x7d3098 [0086.662] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x7c, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 0 [0086.662] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0086.662] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man")) returned 1 [0086.664] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man")) returned 0xffffffff [0086.664] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47efe267, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x47efe267, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48118bce, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e30, dwReserved0=0x0, dwReserved1=0x0, cFileName="QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr", cAlternateFileName="QWLYU3~1.0IL")) returned 1 [0086.664] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0086.664] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0086.664] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x44e30 [0086.665] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0086.665] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0086.780] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x44e30, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x44e30, lpOverlapped=0x0) returned 1 [0086.784] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x44e40, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x44e40, lpOverlapped=0x0) returned 1 [0086.808] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0086.835] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0086.855] CloseHandle (hObject=0x1f8) returned 1 [0086.855] CloseHandle (hObject=0x1fc) returned 1 [0086.862] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0086.862] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0086.862] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47efe267, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x47efe267, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48118bce, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e30, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr", cAlternateFileName="QWLYU3~1.0IL")) returned 0x7d2918 [0086.862] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47efe267, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x47efe267, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48118bce, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e30, dwReserved0=0x7c8630, dwReserved1=0x7df330, cFileName="QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr", cAlternateFileName="QWLYU3~1.0IL")) returned 0 [0086.862] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0086.862] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr")) returned 1 [0086.866] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QWlyU3B2Y2U6RXR3Lm123g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qwlyu3b2y2u6rxr3lm123g99.0ilfzr")) returned 0xffffffff [0086.866] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a939ba6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a939ba6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4af2ee6c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZCF62~1.0IL")) returned 1 [0086.866] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0086.866] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0086.867] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4a50 [0086.867] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0086.867] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0086.996] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4a50, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4a50, lpOverlapped=0x0) returned 1 [0086.997] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4a60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4a60, lpOverlapped=0x0) returned 1 [0086.998] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0087.035] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.046] CloseHandle (hObject=0x1fc) returned 1 [0087.046] CloseHandle (hObject=0x1f8) returned 1 [0087.048] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0087.048] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0087.048] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a939ba6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a939ba6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4af2ee6c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a50, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZCF62~1.0IL")) returned 0x7d2b18 [0087.048] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a939ba6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a939ba6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4af2ee6c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a50, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZCF62~1.0IL")) returned 0 [0087.048] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0087.048] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0087.050] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6325l3m90ZW111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6325l3m90zw111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0087.050] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2380c3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a2380c3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a57f5c3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ696A~1.0IL")) returned 1 [0087.050] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0087.050] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0087.050] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x800 [0087.050] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0087.060] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0087.243] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x800, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x800, lpOverlapped=0x0) returned 1 [0087.243] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x810, lpOverlapped=0x0) returned 1 [0087.244] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0087.336] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.348] CloseHandle (hObject=0x1f8) returned 1 [0087.348] CloseHandle (hObject=0x1fc) returned 1 [0087.349] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0 [0087.349] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0087.350] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2380c3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a2380c3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a57f5c3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ696A~1.0IL")) returned 0x7d2a58 [0087.350] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a2380c3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a2380c3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a57f5c3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ696A~1.0IL")) returned 0 [0087.350] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0087.350] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0087.351] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0087.351] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ef0ea7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49ef0ea7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a211e99, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x19880, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ1176~1.0IL")) returned 1 [0087.351] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0087.351] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0087.352] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x19880 [0087.352] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0087.352] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0087.543] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x19880, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x19880, lpOverlapped=0x0) returned 1 [0087.544] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x19890, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x19890, lpOverlapped=0x0) returned 1 [0087.547] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0087.632] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.643] CloseHandle (hObject=0x1fc) returned 1 [0087.643] CloseHandle (hObject=0x1f8) returned 1 [0087.734] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0087.734] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0087.735] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ef0ea7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49ef0ea7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a211e99, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x19880, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ1176~1.0IL")) returned 0x7d3098 [0087.735] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ef0ea7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49ef0ea7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a211e99, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x19880, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ1176~1.0IL")) returned 0 [0087.735] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0087.735] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0087.737] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0087.737] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bf5ea2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49bf5ea2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49ecac76, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f400, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ9FCA~1.0IL")) returned 1 [0087.737] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0087.737] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0087.738] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f400 [0087.738] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0087.738] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0087.877] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4f400, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4f400, lpOverlapped=0x0) returned 1 [0087.881] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4f410, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4f410, lpOverlapped=0x0) returned 1 [0087.888] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0087.941] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0087.952] CloseHandle (hObject=0x1f8) returned 1 [0087.953] CloseHandle (hObject=0x1fc) returned 1 [0087.959] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0087.959] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0087.960] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bf5ea2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49bf5ea2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49ecac76, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f400, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ9FCA~1.0IL")) returned 0x7d3098 [0087.960] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bf5ea2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49bf5ea2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49ecac76, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f400, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ9FCA~1.0IL")) returned 0 [0087.960] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0087.960] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0087.963] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJ3dy5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzj3dy5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0087.963] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49888824, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49888824, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49b8387d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b50, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ875A~1.0IL")) returned 1 [0087.964] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0087.964] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0087.964] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6b50 [0087.964] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0087.964] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0088.044] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6b50, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6b50, lpOverlapped=0x0) returned 1 [0088.045] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6b60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6b60, lpOverlapped=0x0) returned 1 [0088.046] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0088.092] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0088.103] CloseHandle (hObject=0x1fc) returned 1 [0088.104] CloseHandle (hObject=0x1f8) returned 1 [0088.105] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0088.106] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0088.106] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49888824, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49888824, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49b8387d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b50, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ875A~1.0IL")) returned 0x7d2c98 [0088.106] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49888824, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x49888824, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49b8387d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b50, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ875A~1.0IL")) returned 0 [0088.106] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0088.106] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 1 [0088.107] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q632Zm1WNlMzJtdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q632zm1wnlmzjtdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0xffffffff [0088.107] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2039e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b2039e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b4d863d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b30, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ4ED2~1.0IL")) returned 1 [0088.108] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0088.108] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0088.108] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b30 [0088.108] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0088.108] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0088.217] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b30, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2b30, lpOverlapped=0x0) returned 1 [0088.217] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b40, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2b40, lpOverlapped=0x0) returned 1 [0088.218] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0088.242] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0088.253] CloseHandle (hObject=0x1f8) returned 1 [0088.254] CloseHandle (hObject=0x1fc) returned 1 [0088.318] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0088.318] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0088.318] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2039e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b2039e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b4d863d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b30, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ4ED2~1.0IL")) returned 0x7d2cd8 [0088.318] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b2039e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b2039e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b4d863d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b30, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ4ED2~1.0IL")) returned 0 [0088.319] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0088.319] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0088.320] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633Nt3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633nt3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0088.320] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b81f8e8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b81f8e8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bb32e59, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ8CA0~1.0IL")) returned 1 [0088.320] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0088.320] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0088.320] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b90 [0088.320] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0088.321] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0088.430] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b90, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2b90, lpOverlapped=0x0) returned 1 [0088.430] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2ba0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2ba0, lpOverlapped=0x0) returned 1 [0088.431] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0088.479] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0088.490] CloseHandle (hObject=0x1fc) returned 1 [0088.491] CloseHandle (hObject=0x1f8) returned 1 [0088.492] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0088.492] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0088.492] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b81f8e8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b81f8e8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bb32e59, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ8CA0~1.0IL")) returned 0x7d29d8 [0088.492] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b81f8e8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b81f8e8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bb32e59, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ8CA0~1.0IL")) returned 0 [0088.492] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0088.492] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 1 [0088.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633NtdX2tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633ntdx2tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0xffffffff [0088.494] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bdbb651, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bdbb651, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bf8548b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17990, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ58B6~1.0IL")) returned 1 [0088.494] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0088.494] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0088.494] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17990 [0088.494] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0088.495] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0088.577] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x17990, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x17990, lpOverlapped=0x0) returned 1 [0088.578] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x179a0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x179a0, lpOverlapped=0x0) returned 1 [0088.580] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0088.606] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0088.617] CloseHandle (hObject=0x1f8) returned 1 [0088.617] CloseHandle (hObject=0x1fc) returned 1 [0088.620] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0088.621] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0088.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bdbb651, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bdbb651, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bf8548b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17990, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ58B6~1.0IL")) returned 0x7d2b18 [0088.621] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bdbb651, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bdbb651, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bf8548b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17990, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ58B6~1.0IL")) returned 0 [0088.621] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0088.621] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0088.623] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q633V03G9v12111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q633v03g9v12111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0088.623] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4949678d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4949678d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49888824, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5ba0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ4343~1.0IL")) returned 1 [0088.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0088.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0088.623] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5ba0 [0088.623] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0088.624] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0088.690] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5ba0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5ba0, lpOverlapped=0x0) returned 1 [0088.690] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5bb0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x5bb0, lpOverlapped=0x0) returned 1 [0088.697] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0088.721] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0088.732] CloseHandle (hObject=0x1fc) returned 1 [0088.733] CloseHandle (hObject=0x1f8) returned 1 [0088.734] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0088.735] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0088.735] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4949678d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4949678d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49888824, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5ba0, dwReserved0=0x7c8748, dwReserved1=0x7e2348, cFileName="QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ4343~1.0IL")) returned 0x7d2d18 [0088.735] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4949678d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4949678d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49888824, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5ba0, dwReserved0=0x7c8748, dwReserved1=0x7e2348, cFileName="QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ4343~1.0IL")) returned 0 [0088.735] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0088.735] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0088.736] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q63Hl6Y2111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q63hl6y2111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0088.736] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3c9179, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d3c9179, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d595e68, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2800, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ9836~1.0IL")) returned 1 [0088.736] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0088.737] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0088.737] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb2800 [0088.737] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0088.737] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0088.814] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xb2800, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xb2800, lpOverlapped=0x0) returned 1 [0088.823] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xb2810, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xb2810, lpOverlapped=0x0) returned 1 [0088.871] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0088.893] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0088.905] CloseHandle (hObject=0x1f8) returned 1 [0088.905] CloseHandle (hObject=0x1fc) returned 1 [0088.941] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0088.942] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0088.942] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3c9179, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d3c9179, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d595e68, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2800, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ9836~1.0IL")) returned 0x7d2c58 [0088.942] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d3c9179, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d3c9179, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d595e68, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2800, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ9836~1.0IL")) returned 0 [0088.942] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0088.942] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 1 [0088.949] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6c222cmV5L59mZmljZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6c222cmv5l59mzmljzs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0xffffffff [0088.949] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c449fb8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c449fb8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c57b130, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68b0, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ6F25~1.0IL")) returned 1 [0088.949] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0088.949] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0088.949] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x68b0 [0088.949] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0088.950] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0089.031] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x68b0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x68b0, lpOverlapped=0x0) returned 1 [0089.032] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x68c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x68c0, lpOverlapped=0x0) returned 1 [0089.033] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0089.063] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.080] CloseHandle (hObject=0x1fc) returned 1 [0089.080] CloseHandle (hObject=0x1f8) returned 1 [0089.081] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 0 [0089.082] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0089.082] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c449fb8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c449fb8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c57b130, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ6F25~1.0IL")) returned 0x7d2c58 [0089.082] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c449fb8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c449fb8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c57b130, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ6F25~1.0IL")) returned 0 [0089.082] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0089.082] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0089.084] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cG93ZXJw32l6dG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6cg93zxjw32l6dg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0089.084] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7221b5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c7221b5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c89c1df, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80b0, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ9BA5~1.0IL")) returned 1 [0089.084] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0089.084] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0089.084] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80b0 [0089.084] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0089.085] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0089.154] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x80b0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x80b0, lpOverlapped=0x0) returned 1 [0089.155] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x80c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x80c0, lpOverlapped=0x0) returned 1 [0089.156] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0089.187] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.198] CloseHandle (hObject=0x1f8) returned 1 [0089.198] CloseHandle (hObject=0x1fc) returned 1 [0089.200] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0089.200] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0089.201] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7221b5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c7221b5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c89c1df, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80b0, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ9BA5~1.0IL")) returned 0x7d3098 [0089.201] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c7221b5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c7221b5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c89c1df, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80b0, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ9BA5~1.0IL")) returned 0 [0089.201] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0089.201] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0089.202] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv1mVjdG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv1mvjdg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0089.202] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd349f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4cdd349f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d05bc62, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZCB0E~1.0IL")) returned 1 [0089.202] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0089.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0089.203] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x800 [0089.203] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0089.203] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0089.276] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x800, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x800, lpOverlapped=0x0) returned 1 [0089.276] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x810, lpOverlapped=0x0) returned 1 [0089.277] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0089.300] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.372] CloseHandle (hObject=0x1fc) returned 1 [0089.372] CloseHandle (hObject=0x1f8) returned 1 [0089.375] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0089.376] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0089.376] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd349f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4cdd349f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d05bc62, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZCB0E~1.0IL")) returned 0x7d2998 [0089.376] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cdd349f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4cdd349f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d05bc62, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZCB0E~1.0IL")) returned 0 [0089.376] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0089.376] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 1 [0089.377] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHJv32Zp3mc63XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chjv32zp3mc63xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0xffffffff [0089.377] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1ff604, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d1ff604, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d37cd77, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ2B07~1.0IL")) returned 1 [0089.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0089.378] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0089.378] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3740 [0089.378] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0089.378] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0089.526] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3740, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x3740, lpOverlapped=0x0) returned 1 [0089.526] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3750, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x3750, lpOverlapped=0x0) returned 1 [0089.527] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0089.553] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.565] CloseHandle (hObject=0x1f8) returned 1 [0089.565] CloseHandle (hObject=0x1fc) returned 1 [0089.587] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0 [0089.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0089.588] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1ff604, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d1ff604, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d37cd77, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ2B07~1.0IL")) returned 0x7d29d8 [0089.588] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d1ff604, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d1ff604, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d37cd77, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ2B07~1.0IL")) returned 0 [0089.588] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0089.588] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0089.592] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6cHVi3Glz1GVy3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6chvi3glz1gvy3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0089.592] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddac5a8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4ddac5a8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4df20044, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13110, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ939C~1.0IL")) returned 1 [0089.592] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0089.593] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0089.678] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13110 [0089.678] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0089.678] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0089.751] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x13110, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x13110, lpOverlapped=0x0) returned 1 [0089.752] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x13120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x13120, lpOverlapped=0x0) returned 1 [0089.754] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0089.778] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0089.789] CloseHandle (hObject=0x1fc) returned 1 [0089.790] CloseHandle (hObject=0x1f8) returned 1 [0089.792] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0089.792] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0089.793] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddac5a8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4ddac5a8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4df20044, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13110, dwReserved0=0x7c8748, dwReserved1=0x7e2348, cFileName="QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ939C~1.0IL")) returned 0x7d2a58 [0089.793] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ddac5a8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4ddac5a8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4df20044, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13110, dwReserved0=0x7c8748, dwReserved1=0x7e2348, cFileName="QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ939C~1.0IL")) returned 0 [0089.793] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0089.793] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0089.794] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6d29yZG111S5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6d29yzg111s5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0089.794] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d736748, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d736748, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d9759fc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ7A6F~1.0IL")) returned 1 [0089.795] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0089.795] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0089.795] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0cc0 [0089.795] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0089.795] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0089.881] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xf0cc0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xf0cc0, lpOverlapped=0x0) returned 1 [0089.892] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xf0cd0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xf0cd0, lpOverlapped=0x0) returned 1 [0089.908] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0089.999] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.011] CloseHandle (hObject=0x1f8) returned 1 [0090.011] CloseHandle (hObject=0x1fc) returned 1 [0090.034] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0090.035] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0090.035] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d736748, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d736748, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d9759fc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0cc0, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ7A6F~1.0IL")) returned 0x7d3018 [0090.035] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d736748, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d736748, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d9759fc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0cc0, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ7A6F~1.0IL")) returned 0 [0090.036] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0090.036] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 1 [0090.046] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6dmlz1W9tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6dmlz1w9tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0xffffffff [0090.046] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48118bce, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48118bce, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48350960, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZJSTW~1.0IL")) returned 1 [0090.047] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.047] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0090.047] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9200 [0090.047] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0090.047] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0090.132] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x9200, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x9200, lpOverlapped=0x0) returned 1 [0090.134] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x9210, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x9210, lpOverlapped=0x0) returned 1 [0090.135] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0090.158] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.171] CloseHandle (hObject=0x1fc) returned 1 [0090.171] CloseHandle (hObject=0x1f8) returned 1 [0090.173] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0090.173] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0090.173] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48118bce, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48118bce, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48350960, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZJSTW~1.0IL")) returned 0x7d2c98 [0090.174] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48118bce, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48118bce, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48350960, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9200, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZJSTW~1.0IL")) returned 0 [0090.174] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0090.174] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 1 [0090.175] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6QWNjZXNzL5FjY2Vzcy54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6qwnjzxnzl5fjy2vzcy54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0xffffffff [0090.175] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d6f86b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48d6f86b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48eed3f7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ972F~1.0IL")) returned 1 [0090.175] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0090.175] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.176] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8fa0 [0090.176] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0090.177] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0090.249] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8fa0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8fa0, lpOverlapped=0x0) returned 1 [0090.250] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8fb0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8fb0, lpOverlapped=0x0) returned 1 [0090.251] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0090.276] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.288] CloseHandle (hObject=0x1f8) returned 1 [0090.288] CloseHandle (hObject=0x1fc) returned 1 [0090.289] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0090.290] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0090.290] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d6f86b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48d6f86b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48eed3f7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ972F~1.0IL")) returned 0x7d2f58 [0090.290] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48d6f86b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48d6f86b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48eed3f7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ972F~1.0IL")) returned 0 [0090.290] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0090.290] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 1 [0090.292] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6R3Jv33ZlL5dy3292ZS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6r3jv33zll5dy3292zs54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0xffffffff [0090.292] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4877d2fb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4877d2fb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x489693f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZJSTW~4.0IL")) returned 1 [0090.292] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.292] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0090.292] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3f20 [0090.292] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0090.293] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0090.366] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3f20, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x3f20, lpOverlapped=0x0) returned 1 [0090.367] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3f30, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x3f30, lpOverlapped=0x0) returned 1 [0090.368] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0090.392] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.406] CloseHandle (hObject=0x1fc) returned 1 [0090.406] CloseHandle (hObject=0x1f8) returned 1 [0090.407] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0090.408] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0090.408] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4877d2fb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4877d2fb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x489693f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZJSTW~4.0IL")) returned 0x7d2b58 [0090.408] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4877d2fb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4877d2fb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x489693f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f20, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZJSTW~4.0IL")) returned 0 [0090.408] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0090.408] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 1 [0090.410] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RENGL5RDRi54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rengl5rdri54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0xffffffff [0090.410] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a9b5df, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48a9b5df, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48c3e345, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39da0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZ538A~1.0IL")) returned 1 [0090.410] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0090.410] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.410] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39da0 [0090.410] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0090.411] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0090.534] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x39da0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x39da0, lpOverlapped=0x0) returned 1 [0090.542] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x39db0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x39db0, lpOverlapped=0x0) returned 1 [0090.546] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0090.593] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.604] CloseHandle (hObject=0x1f8) returned 1 [0090.604] CloseHandle (hObject=0x1fc) returned 1 [0090.609] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0090.611] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0090.611] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a9b5df, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48a9b5df, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48c3e345, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39da0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZ538A~1.0IL")) returned 0x7d2c18 [0090.611] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48a9b5df, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48a9b5df, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48c3e345, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39da0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZ538A~1.0IL")) returned 0 [0090.611] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0090.611] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 1 [0090.614] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6RX2jZWw6RX2jZWw67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6rx2jzww6rx2jzww67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0xffffffff [0090.614] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0139bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b0139bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b2039e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ92E2~1.0IL")) returned 1 [0090.614] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.614] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0090.615] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x600 [0090.615] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0090.615] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0090.793] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x600, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x600, lpOverlapped=0x0) returned 1 [0090.793] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x610, lpOverlapped=0x0) returned 1 [0090.794] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0090.819] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.831] CloseHandle (hObject=0x1fc) returned 1 [0090.831] CloseHandle (hObject=0x1f8) returned 1 [0090.832] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0090.833] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0090.833] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0139bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b0139bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b2039e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ92E2~1.0IL")) returned 0x7d2d18 [0090.833] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b0139bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b0139bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b2039e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ92E2~1.0IL")) returned 0 [0090.833] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0090.833] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 1 [0090.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNL59TTS54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnl59tts54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0xffffffff [0090.835] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4fe892, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b4fe892, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b81f8e8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZF640~1.0IL")) returned 1 [0090.835] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0090.835] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.835] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x910 [0090.835] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0090.836] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0090.952] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x910, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x910, lpOverlapped=0x0) returned 1 [0090.952] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x920, lpOverlapped=0x0) returned 1 [0090.954] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0090.984] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0090.996] CloseHandle (hObject=0x1f8) returned 1 [0090.996] CloseHandle (hObject=0x1fc) returned 1 [0090.997] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0090.997] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0090.997] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4fe892, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b4fe892, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b81f8e8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZF640~1.0IL")) returned 0x7d2b58 [0090.998] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b4fe892, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4b4fe892, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4b81f8e8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x910, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZF640~1.0IL")) returned 0 [0090.998] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0090.998] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 1 [0090.999] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T1NNVVg6T1NNVVg67C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t1nnvvg6t1nnvvg67c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0xffffffff [0090.999] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a57f5c3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a57f5c3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a939ba6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b40, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZB5EB~1.0IL")) returned 1 [0090.999] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0090.999] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0091.000] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17b40 [0091.000] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0091.000] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0091.086] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x17b40, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x17b40, lpOverlapped=0x0) returned 1 [0091.089] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x17b50, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x17b50, lpOverlapped=0x0) returned 1 [0091.092] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0091.122] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.139] CloseHandle (hObject=0x1fc) returned 1 [0091.139] CloseHandle (hObject=0x1f8) returned 1 [0091.142] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0091.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0091.142] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a57f5c3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a57f5c3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a939ba6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b40, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZB5EB~1.0IL")) returned 0x7d2918 [0091.142] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a57f5c3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4a57f5c3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4a939ba6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b40, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZB5EB~1.0IL")) returned 0 [0091.142] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0091.143] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0091.144] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T25lTm90ZS5P3mVO33RlLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t25ltm90zs5p3mvo33rllngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0091.144] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb32e59, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bb32e59, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bdbb651, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171a0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ1F33~1.0IL")) returned 1 [0091.144] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0091.145] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0091.145] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x171a0 [0091.145] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0091.145] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0091.222] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x171a0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x171a0, lpOverlapped=0x0) returned 1 [0091.223] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x171b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x171b0, lpOverlapped=0x0) returned 1 [0091.232] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0091.257] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.268] CloseHandle (hObject=0x1f8) returned 1 [0091.268] CloseHandle (hObject=0x1fc) returned 1 [0091.271] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0091.274] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0091.274] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb32e59, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bb32e59, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bdbb651, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ1F33~1.0IL")) returned 0x7d2f58 [0091.275] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bb32e59, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bb32e59, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4bdbb651, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ1F33~1.0IL")) returned 0 [0091.275] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0091.275] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0091.277] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6T3V03G9v1y5PdXRs329rLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6t3v03g9v1y5pdxrs329rlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0091.277] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4914f302, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4914f302, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49470517, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197a0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZF771~1.0IL")) returned 1 [0091.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0091.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0091.277] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x197a0 [0091.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0091.278] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0091.416] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x197a0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x197a0, lpOverlapped=0x0) returned 1 [0091.418] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x197b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x197b0, lpOverlapped=0x0) returned 1 [0091.420] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0091.447] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.459] CloseHandle (hObject=0x1fc) returned 1 [0091.459] CloseHandle (hObject=0x1f8) returned 1 [0091.464] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0091.465] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0091.465] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4914f302, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4914f302, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49470517, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZF771~1.0IL")) returned 0x7d3098 [0091.465] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4914f302, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4914f302, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x49470517, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZF771~1.0IL")) returned 0 [0091.465] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0091.465] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0091.467] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6THl6Yy5M7W5jLngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6thl6yy5m7w5jlngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0091.468] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf8548b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bf8548b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c2a639d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafde0, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ7B93~1.0IL")) returned 1 [0091.468] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0091.468] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0091.468] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xafde0 [0091.468] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0091.469] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0091.544] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xafde0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xafde0, lpOverlapped=0x0) returned 1 [0091.556] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xafdf0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xafdf0, lpOverlapped=0x0) returned 1 [0091.570] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0091.593] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.604] CloseHandle (hObject=0x1f8) returned 1 [0091.605] CloseHandle (hObject=0x1fc) returned 1 [0091.620] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0091.621] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0091.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf8548b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bf8548b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c2a639d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafde0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ7B93~1.0IL")) returned 0x7d2f58 [0091.621] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bf8548b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4bf8548b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c2a639d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafde0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ7B93~1.0IL")) returned 0 [0091.621] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0091.621] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0091.628] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ1XZvdC5Q33dlclBpdm90Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq1xzvdc5q33dlclbpdm90lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0091.628] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2f2898, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c2f2898, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c449fb8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZE616~1.0IL")) returned 1 [0091.628] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0091.628] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0091.629] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x195b0 [0091.629] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0091.629] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0091.708] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x195b0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x195b0, lpOverlapped=0x0) returned 1 [0091.711] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x195c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x195c0, lpOverlapped=0x0) returned 1 [0091.713] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0091.736] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0091.748] CloseHandle (hObject=0x1fc) returned 1 [0091.748] CloseHandle (hObject=0x1f8) returned 1 [0091.751] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0091.752] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0091.752] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2f2898, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c2f2898, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c449fb8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZE616~1.0IL")) returned 0x7d2f58 [0091.752] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c2f2898, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c2f2898, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c449fb8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZE616~1.0IL")) returned 0 [0091.752] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0091.752] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0091.754] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UG93ZXJQ32l6dC5Q33dlclBv1W50Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ug93zxjq32l6dc5q33dlclbv1w50lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0091.754] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57b130, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c57b130, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c6f8a0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZFD6F~1.0IL")) returned 1 [0091.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0091.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0091.754] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7450 [0091.754] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0091.755] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0092.140] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7450, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x7450, lpOverlapped=0x0) returned 1 [0092.141] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x7460, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x7460, lpOverlapped=0x0) returned 1 [0092.143] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0092.240] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.252] CloseHandle (hObject=0x1f8) returned 1 [0092.252] CloseHandle (hObject=0x1fc) returned 1 [0092.254] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0092.254] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0092.254] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57b130, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c57b130, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c6f8a0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZFD6F~1.0IL")) returned 0x7d2f58 [0092.254] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c57b130, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c57b130, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c6f8a0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZFD6F~1.0IL")) returned 0 [0092.255] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0092.255] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0092.257] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv1mVjdC5Qcm9qZWN0Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv1mvjdc5qcm9qzwn0lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0092.257] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cca2149, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4cca2149, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4cdd349f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr", cAlternateFileName="QZ493B~1.0IL")) returned 1 [0092.257] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0092.257] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0092.257] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6000 [0092.257] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0092.258] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0092.440] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6000, lpOverlapped=0x0) returned 1 [0092.442] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6010, lpOverlapped=0x0) returned 1 [0092.443] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0092.545] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.557] CloseHandle (hObject=0x1fc) returned 1 [0092.557] CloseHandle (hObject=0x1f8) returned 1 [0092.559] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr")) returned 0 [0092.559] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0092.560] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cca2149, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4cca2149, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4cdd349f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr", cAlternateFileName="QZ493B~1.0IL")) returned 0x7d2f58 [0092.560] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4cca2149, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4cca2149, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4cdd349f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr", cAlternateFileName="QZ493B~1.0IL")) returned 0 [0092.560] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0092.560] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr")) returned 1 [0092.561] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZnItZnI67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6znitzni67g1s.0ilfzr")) returned 0xffffffff [0092.561] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c89c1df, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c89c1df, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c9f36ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63c0, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ4FE8~1.0IL")) returned 1 [0092.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0092.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0092.562] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x63c0 [0092.562] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0092.562] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0092.757] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x63c0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x63c0, lpOverlapped=0x0) returned 1 [0092.758] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x63d0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x63d0, lpOverlapped=0x0) returned 1 [0092.759] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0092.783] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0092.836] CloseHandle (hObject=0x1f8) returned 1 [0092.836] CloseHandle (hObject=0x1fc) returned 1 [0092.838] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 0 [0092.839] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0092.839] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c89c1df, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c89c1df, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c9f36ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63c0, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ4FE8~1.0IL")) returned 0x7d2a18 [0092.839] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c89c1df, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c89c1df, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4c9f36ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63c0, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr", cAlternateFileName="QZ4FE8~1.0IL")) returned 0 [0092.839] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0092.839] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 1 [0092.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZW4tdXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zw4tdxm67g1s.0ilfzr")) returned 0xffffffff [0092.844] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f36ca, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c9f36ca, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4cca2149, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr", cAlternateFileName="QZ1D56~1.0IL")) returned 1 [0092.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0092.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0092.844] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6000 [0092.844] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0092.845] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0093.035] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6000, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6000, lpOverlapped=0x0) returned 1 [0093.036] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6010, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6010, lpOverlapped=0x0) returned 1 [0093.038] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0093.068] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.247] CloseHandle (hObject=0x1fc) returned 1 [0093.247] CloseHandle (hObject=0x1f8) returned 1 [0093.248] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr")) returned 0 [0093.249] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0093.249] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f36ca, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c9f36ca, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4cca2149, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr", cAlternateFileName="QZ1D56~1.0IL")) returned 0x7d3098 [0093.249] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c9f36ca, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4c9f36ca, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4cca2149, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr", cAlternateFileName="QZ1D56~1.0IL")) returned 0 [0093.249] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0093.249] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr")) returned 1 [0093.250] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHJv32Y6Q3VsdHVyZS5tc256MTY6ZXMtZXM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhjv32y6q3vsdhvyzs5tc256mty6zxmtzxm67g1s.0ilfzr")) returned 0xffffffff [0093.250] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0820eb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d0820eb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d1ff604, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e50, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ6EFE~1.0IL")) returned 1 [0093.251] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0093.251] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0093.251] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12e50 [0093.251] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0093.251] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0093.468] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x12e50, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x12e50, lpOverlapped=0x0) returned 1 [0093.471] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x12e60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x12e60, lpOverlapped=0x0) returned 1 [0093.473] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0093.543] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.555] CloseHandle (hObject=0x1f8) returned 1 [0093.555] CloseHandle (hObject=0x1fc) returned 1 [0093.558] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0093.558] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0093.559] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0820eb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d0820eb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d1ff604, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e50, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ6EFE~1.0IL")) returned 0x7d2f58 [0093.559] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d0820eb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d0820eb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d1ff604, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e50, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr", cAlternateFileName="QZ6EFE~1.0IL")) returned 0 [0093.559] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0093.559] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 1 [0093.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6UHVi3Glz1GVyLlB1Ym4pc22lci54LW5v3mU63XNpLjE2Lngt3m96ZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6uhvi3glz1gvyllb1ym4pc22lci54lw5v3mu63xnplje2lngt3m96zs543ww9.0ilfzr")) returned 0xffffffff [0093.560] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9759fc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d9759fc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4dd78c73, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x15380, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ9C73~1.0IL")) returned 1 [0093.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0093.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0093.561] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15380 [0093.561] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0093.561] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0093.781] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x15380, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x15380, lpOverlapped=0x0) returned 1 [0093.783] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x15390, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x15390, lpOverlapped=0x0) returned 1 [0093.786] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0093.871] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0093.882] CloseHandle (hObject=0x1fc) returned 1 [0093.882] CloseHandle (hObject=0x1f8) returned 1 [0093.885] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0093.885] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0093.886] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9759fc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d9759fc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4dd78c73, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x15380, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ9C73~1.0IL")) returned 0x7d2998 [0093.886] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d9759fc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d9759fc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4dd78c73, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x15380, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr", cAlternateFileName="QZ9C73~1.0IL")) returned 0 [0093.886] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0093.886] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 1 [0093.887] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6V29yZC5X33J5Lngt3m96ZS5tc256MTY67C16325lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6v29yzc5x33j5lngt3m96zs5tc256mty67c16325lln2t3a99.0ilfzr")) returned 0xffffffff [0093.888] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5b9182, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d5b9182, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d710667, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab10, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZ7D46~1.0IL")) returned 1 [0093.888] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0093.888] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0093.888] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ab10 [0093.889] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0093.889] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0094.104] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ab10, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2ab10, lpOverlapped=0x0) returned 1 [0094.107] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2ab20, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2ab20, lpOverlapped=0x0) returned 1 [0094.111] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0094.182] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.196] CloseHandle (hObject=0x1f8) returned 1 [0094.196] CloseHandle (hObject=0x1fc) returned 1 [0094.201] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0094.202] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0094.202] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5b9182, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d5b9182, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d710667, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab10, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZ7D46~1.0IL")) returned 0x7d2b18 [0094.202] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4d5b9182, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4d5b9182, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4d710667, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab10, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr", cAlternateFileName="QZ7D46~1.0IL")) returned 0 [0094.202] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0094.202] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 1 [0094.204] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Vmlz1W86Vmlz1W867C16325lLm1z1S44Ni54LW5v3mU67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6vmlz1w86vmlz1w867c16325llm1z1s44ni54lw5v3mu67g1s.0ilfzr")) returned 0xffffffff [0094.204] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484f4265, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x484f4265, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4877d2fb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZJSTW~3.0IL")) returned 1 [0094.205] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0094.205] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0094.205] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x800 [0094.205] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0094.205] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0094.439] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x800, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x800, lpOverlapped=0x0) returned 1 [0094.439] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x810, lpOverlapped=0x0) returned 1 [0094.440] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0094.510] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.521] CloseHandle (hObject=0x1fc) returned 1 [0094.521] CloseHandle (hObject=0x1f8) returned 1 [0094.523] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0 [0094.523] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0094.523] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484f4265, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x484f4265, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4877d2fb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZJSTW~3.0IL")) returned 0x7d3098 [0094.523] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x484f4265, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x484f4265, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4877d2fb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZJSTW~3.0IL")) returned 0 [0094.523] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0094.524] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0094.525] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpc2V0Lm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvpc2v0lm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0094.525] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48376a84, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48376a84, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x484ce0ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe720, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZJSTW~2.0IL")) returned 1 [0094.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0094.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0094.525] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe720 [0094.525] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0094.526] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0094.629] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xe720, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xe720, lpOverlapped=0x0) returned 1 [0094.631] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xe730, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xe730, lpOverlapped=0x0) returned 1 [0094.633] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0094.700] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.711] CloseHandle (hObject=0x1f8) returned 1 [0094.711] CloseHandle (hObject=0x1fc) returned 1 [0094.715] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0094.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0094.716] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48376a84, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48376a84, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x484ce0ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe720, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZJSTW~2.0IL")) returned 0x7d2f58 [0094.716] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48376a84, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48376a84, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x484ce0ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe720, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZJSTW~2.0IL")) returned 0 [0094.716] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0094.716] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0094.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6YWNjZXNz3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6ywnjzxnz3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0094.717] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f13250, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48f13250, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4914f302, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZED56~1.0IL")) returned 1 [0094.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0094.718] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0094.718] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1820 [0094.718] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0094.718] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0094.805] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1820, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1820, lpOverlapped=0x0) returned 1 [0094.806] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1830, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1830, lpOverlapped=0x0) returned 1 [0094.807] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0094.810] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0094.811] CloseHandle (hObject=0x1fc) returned 1 [0094.811] CloseHandle (hObject=0x1f8) returned 1 [0094.812] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0094.813] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0094.813] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f13250, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48f13250, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4914f302, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZED56~1.0IL")) returned 0x7d2c18 [0094.813] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48f13250, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48f13250, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4914f302, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1820, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZED56~1.0IL")) returned 0 [0094.813] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0094.813] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0094.815] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6Z3Jv33Zl3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6z3jv33zl3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0094.815] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489693f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x489693f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48a9b5df, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2660, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ62C9~1.0IL")) returned 1 [0094.815] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0094.815] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0094.815] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2660 [0094.815] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0094.816] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0095.072] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2660, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2660, lpOverlapped=0x0) returned 1 [0095.073] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2670, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2670, lpOverlapped=0x0) returned 1 [0095.074] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0095.128] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.139] CloseHandle (hObject=0x1f8) returned 1 [0095.139] CloseHandle (hObject=0x1fc) returned 1 [0095.140] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0095.141] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0095.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489693f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x489693f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48a9b5df, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2660, dwReserved0=0x7c8748, dwReserved1=0x7e2348, cFileName="QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ62C9~1.0IL")) returned 0x7d2c98 [0095.141] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489693f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x489693f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48a9b5df, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2660, dwReserved0=0x7c8748, dwReserved1=0x7e2348, cFileName="QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr", cAlternateFileName="QZ62C9~1.0IL")) returned 0 [0095.141] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0095.141] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 1 [0095.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZGNm3XVpLm1z1S44Ni5l3i11cy543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zgnm3xvplm1z1s44ni5l3i11cy543ww9.0ilfzr")) returned 0xffffffff [0095.142] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c3e345, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48c3e345, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48d6f86b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8f80, dwReserved0=0x0, dwReserved1=0x0, cFileName="QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ7AAE~1.0IL")) returned 1 [0095.142] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0095.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0095.143] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8f80 [0095.143] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0095.143] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0095.237] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8f80, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8f80, lpOverlapped=0x0) returned 1 [0095.238] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8f90, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8f90, lpOverlapped=0x0) returned 1 [0095.240] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0095.317] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.329] CloseHandle (hObject=0x1fc) returned 1 [0095.329] CloseHandle (hObject=0x1f8) returned 1 [0095.331] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0095.331] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0095.331] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c3e345, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48c3e345, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48d6f86b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8f80, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ7AAE~1.0IL")) returned 0x7d2f58 [0095.331] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x48c3e345, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x48c3e345, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x48d6f86b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8f80, dwReserved0=0x7c8720, dwReserved1=0x7e1340, cFileName="QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr", cAlternateFileName="QZ7AAE~1.0IL")) returned 0 [0095.331] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0095.332] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 1 [0095.333] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\QzJSTWF61WZlc3Q6ZX2jZW4tdW563XNpLjE2LmV6LXVzLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\qzjstwf61wzlc3q6zx2jzw4tdw563xnplje2lmv6lxvzln2t3a99.0ilfzr")) returned 0xffffffff [0095.333] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3e298d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4e3e298d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4e61d36d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr", cAlternateFileName="TWLJCM~2.0IL")) returned 1 [0095.333] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0095.333] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0095.333] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcb0 [0095.333] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0095.334] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0095.577] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcb0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xcb0, lpOverlapped=0x0) returned 1 [0095.578] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xcc0, lpOverlapped=0x0) returned 1 [0095.579] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0095.602] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.612] CloseHandle (hObject=0x1f8) returned 1 [0095.613] CloseHandle (hObject=0x1fc) returned 1 [0095.614] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr")) returned 0 [0095.614] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0095.614] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3e298d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4e3e298d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4e61d36d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr", cAlternateFileName="TWLJCM~2.0IL")) returned 0x7d2f58 [0095.615] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e3e298d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4e3e298d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4e61d36d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcb0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr", cAlternateFileName="TWLJCM~2.0IL")) returned 0 [0095.615] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0095.615] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr")) returned 1 [0095.655] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dE4vZ096MjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6de4vz096mja4ni543ww9.0ilfzr")) returned 0xffffffff [0095.655] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e158825, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4e158825, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4e3bae3b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcf0, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr", cAlternateFileName="TWLJCM~1.0IL")) returned 1 [0095.656] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0095.656] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0095.656] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcf0 [0095.656] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0095.656] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0095.724] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcf0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xcf0, lpOverlapped=0x0) returned 1 [0095.724] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xd00, lpOverlapped=0x0) returned 1 [0095.726] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0095.750] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.761] CloseHandle (hObject=0x1fc) returned 1 [0095.761] CloseHandle (hObject=0x1f8) returned 1 [0095.762] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0095.763] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0095.763] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e158825, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4e158825, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4e3bae3b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcf0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr", cAlternateFileName="TWLJCM~1.0IL")) returned 0x7d2f58 [0095.763] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e158825, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4e158825, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4e3bae3b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcf0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr", cAlternateFileName="TWLJCM~1.0IL")) returned 0 [0095.763] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0095.763] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr")) returned 1 [0095.764] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\TWljcm9z32Z0X09mZmljZV9PZmZpY2VUZW4l3WV0cnlBZ2V6dEZ23G4CYWNrMjA4Ni543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\twljcm9z32z0x09mzmljzv9pzmzpy2vuzw4l3wv0cnlbz2v6dez23g4cywnrmja4ni543ww9.0ilfzr")) returned 0xffffffff [0095.764] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee95dd5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4ee95dd5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f0600de, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e40, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UVDS7V~1.0IL")) returned 1 [0095.764] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0095.764] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0095.765] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x44e40 [0095.765] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0095.765] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0095.872] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x44e40, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x44e40, lpOverlapped=0x0) returned 1 [0095.877] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x44e50, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x44e50, lpOverlapped=0x0) returned 1 [0095.891] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0095.914] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0095.925] CloseHandle (hObject=0x1f8) returned 1 [0095.926] CloseHandle (hObject=0x1fc) returned 1 [0095.933] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0095.933] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0x20 [0095.933] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee95dd5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4ee95dd5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f0600de, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e40, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UVDS7V~1.0IL")) returned 0x7d29d8 [0095.934] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ee95dd5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4ee95dd5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f0600de, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e40, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UVDS7V~1.0IL")) returned 0 [0095.934] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0095.934] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr")) returned 1 [0095.937] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UVds7VUzQjJZMlU2Ul2SM04tMTIzZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uvds7vuzqjjzmlu2ul2sm04tmtizzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0095.937] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0600de, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f0600de, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f21f59a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXPKU1~1.0IL")) returned 1 [0095.937] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0095.937] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0095.938] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4a60 [0095.938] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0095.938] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.027] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4a60, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4a60, lpOverlapped=0x0) returned 1 [0096.028] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4a70, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4a70, lpOverlapped=0x0) returned 1 [0096.029] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0096.065] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.076] CloseHandle (hObject=0x1fc) returned 1 [0096.077] CloseHandle (hObject=0x1f8) returned 1 [0096.078] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0096.079] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0096.079] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0600de, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f0600de, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f21f59a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a60, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXPKU1~1.0IL")) returned 0x7d2d58 [0096.079] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f0600de, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f0600de, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f21f59a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a60, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXPKU1~1.0IL")) returned 0 [0096.079] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0096.079] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 1 [0096.080] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyNWwz3T5wWlc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmynwwz3t5wwlc4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0096.080] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f51a738, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f51a738, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f8ae025, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x19890, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXPKU1~3.0IL")) returned 1 [0096.081] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0096.081] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0096.081] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x19890 [0096.081] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0096.081] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.159] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x19890, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x19890, lpOverlapped=0x0) returned 1 [0096.161] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x198a0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x198a0, lpOverlapped=0x0) returned 1 [0096.163] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0096.194] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.206] CloseHandle (hObject=0x1f8) returned 1 [0096.206] CloseHandle (hObject=0x1fc) returned 1 [0096.209] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0096.209] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0096.210] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f51a738, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f51a738, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f8ae025, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x19890, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXPKU1~3.0IL")) returned 0x7d2a98 [0096.210] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f51a738, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f51a738, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f8ae025, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x19890, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXPKU1~3.0IL")) returned 0 [0096.210] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0096.210] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 1 [0096.212] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0096.212] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f21f59a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f21f59a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f51a738, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UXPKU1~2.0IL")) returned 1 [0096.212] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0096.214] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0096.214] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x810 [0096.214] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0096.215] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.337] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x810, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x810, lpOverlapped=0x0) returned 1 [0096.338] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x820, lpOverlapped=0x0) returned 1 [0096.339] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0096.361] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.377] CloseHandle (hObject=0x1fc) returned 1 [0096.377] CloseHandle (hObject=0x1f8) returned 1 [0096.378] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0096.379] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0096.379] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f21f59a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f21f59a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f51a738, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UXPKU1~2.0IL")) returned 0x7d2cd8 [0096.379] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f21f59a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f21f59a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4f51a738, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UXPKU1~2.0IL")) returned 0 [0096.379] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0096.379] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 1 [0096.380] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sM12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05sm12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0096.380] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4faeeb01, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4faeeb01, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fc417db, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX8410~1.0IL")) returned 1 [0096.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0096.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0096.381] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6b60 [0096.381] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0096.381] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.453] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6b60, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6b60, lpOverlapped=0x0) returned 1 [0096.454] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6b70, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6b70, lpOverlapped=0x0) returned 1 [0096.456] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0096.480] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.491] CloseHandle (hObject=0x1f8) returned 1 [0096.491] CloseHandle (hObject=0x1fc) returned 1 [0096.493] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0096.493] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0096.493] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4faeeb01, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4faeeb01, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fc417db, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b60, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX8410~1.0IL")) returned 0x7d2f58 [0096.494] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4faeeb01, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4faeeb01, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fc417db, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b60, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX8410~1.0IL")) returned 0 [0096.494] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0096.494] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr")) returned 1 [0096.495] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKdGRXNTYzWE5wTGpFM54tVjZMWFZ6TG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkdgrxntyzwe5wtgpfm54tvjzmwfz6tg4yddnbot56mglsznpy.0ilfzr")) returned 0xffffffff [0096.495] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8ae025, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f8ae025, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4faeeb01, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f410, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UXPKU1~4.0IL")) returned 1 [0096.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0096.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0096.496] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f410 [0096.496] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0096.496] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.573] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4f410, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4f410, lpOverlapped=0x0) returned 1 [0096.578] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4f420, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4f420, lpOverlapped=0x0) returned 1 [0096.584] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0096.622] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.633] CloseHandle (hObject=0x1fc) returned 1 [0096.633] CloseHandle (hObject=0x1f8) returned 1 [0096.640] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0096.641] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0096.641] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8ae025, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f8ae025, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4faeeb01, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f410, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UXPKU1~4.0IL")) returned 0x7d2c18 [0096.641] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f8ae025, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4f8ae025, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4faeeb01, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f410, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UXPKU1~4.0IL")) returned 0 [0096.641] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0096.641] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 1 [0096.645] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMyWm04V05sTXpKM2R5NXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmywm04v05stxpkm2r5nxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0xffffffff [0096.645] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc417db, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fc417db, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fe59592, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX4C0F~1.0IL")) returned 1 [0096.645] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0096.645] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0096.645] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b40 [0096.645] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0096.646] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.848] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b40, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2b40, lpOverlapped=0x0) returned 1 [0096.852] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b50, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2b50, lpOverlapped=0x0) returned 1 [0096.853] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0096.883] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0096.894] CloseHandle (hObject=0x1f8) returned 1 [0096.894] CloseHandle (hObject=0x1fc) returned 1 [0096.895] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0096.896] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0096.896] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc417db, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fc417db, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fe59592, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b40, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX4C0F~1.0IL")) returned 0x7d2a18 [0096.896] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fc417db, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fc417db, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fe59592, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b40, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX4C0F~1.0IL")) returned 0 [0096.896] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0096.897] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 1 [0096.898] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnQzWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnqzwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0096.898] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fe59592, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fe59592, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fffb2d2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX25EC~1.0IL")) returned 1 [0096.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0096.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0096.901] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ba0 [0096.901] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0096.902] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0096.980] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ba0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2ba0, lpOverlapped=0x0) returned 1 [0096.981] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2bb0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2bb0, lpOverlapped=0x0) returned 1 [0096.982] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.039] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.073] CloseHandle (hObject=0x1fc) returned 1 [0097.073] CloseHandle (hObject=0x1f8) returned 1 [0097.075] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0097.075] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0097.075] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fe59592, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fe59592, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fffb2d2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX25EC~1.0IL")) returned 0x7d2f58 [0097.076] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fe59592, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fe59592, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x4fffb2d2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ba0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX25EC~1.0IL")) returned 0 [0097.076] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0097.076] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 1 [0097.077] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzTnR5WDJ0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmztnr5wdj0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0097.077] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fffb2d2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fffb2d2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5012c667, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x179a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX8EB7~1.0IL")) returned 1 [0097.078] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0097.078] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0097.078] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x179a0 [0097.078] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0097.079] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0097.227] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x179a0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x179a0, lpOverlapped=0x0) returned 1 [0097.230] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x179b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x179b0, lpOverlapped=0x0) returned 1 [0097.232] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.254] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.268] CloseHandle (hObject=0x1f8) returned 1 [0097.268] CloseHandle (hObject=0x1fc) returned 1 [0097.271] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0097.272] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0097.272] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fffb2d2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fffb2d2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5012c667, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x179a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX8EB7~1.0IL")) returned 0x7d2998 [0097.272] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4fffb2d2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x4fffb2d2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5012c667, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x179a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX8EB7~1.0IL")) returned 0 [0097.272] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0097.272] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 1 [0097.274] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjMzVjAzRzl2MTI4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjmzvjazrzl2mti4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0097.274] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5012c667, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5012c667, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50237687, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5bb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXEDF6~1.0IL")) returned 1 [0097.274] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0097.274] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0097.275] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5bb0 [0097.275] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0097.275] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0097.356] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5bb0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5bb0, lpOverlapped=0x0) returned 1 [0097.358] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5bc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x5bc0, lpOverlapped=0x0) returned 1 [0097.359] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.383] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.395] CloseHandle (hObject=0x1fc) returned 1 [0097.396] CloseHandle (hObject=0x1f8) returned 1 [0097.397] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0097.397] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0097.398] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5012c667, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5012c667, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50237687, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5bb0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXEDF6~1.0IL")) returned 0x7d2f58 [0097.398] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5012c667, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5012c667, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50237687, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5bb0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXEDF6~1.0IL")) returned 0 [0097.398] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0097.398] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 1 [0097.402] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNjNI3DZZMjE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnjni3dzzmje4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0097.402] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ebbc0a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50ebbc0a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50fecddb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9210, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX7372~1.0IL")) returned 1 [0097.403] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0097.403] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0097.403] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9210 [0097.403] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0097.403] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0097.514] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x9210, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x9210, lpOverlapped=0x0) returned 1 [0097.515] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x9220, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x9220, lpOverlapped=0x0) returned 1 [0097.516] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.541] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.556] CloseHandle (hObject=0x1f8) returned 1 [0097.556] CloseHandle (hObject=0x1fc) returned 1 [0097.558] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0 [0097.558] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0x20 [0097.558] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ebbc0a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50ebbc0a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50fecddb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9210, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX7372~1.0IL")) returned 0x7d2f58 [0097.559] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ebbc0a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50ebbc0a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50fecddb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9210, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX7372~1.0IL")) returned 0 [0097.559] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0097.559] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 1 [0097.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlFXTmp1WE56TDVG1l5yVnpj7TU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlfxtmp1we56tdvg1l5yvnpj7tu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0097.560] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51013229, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51013229, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5111e17c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fb0, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX156A~1.0IL")) returned 1 [0097.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0097.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0097.561] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8fb0 [0097.561] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0097.561] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0097.637] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8fb0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8fb0, lpOverlapped=0x0) returned 1 [0097.641] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8fc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8fc0, lpOverlapped=0x0) returned 1 [0097.643] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.666] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.677] CloseHandle (hObject=0x1fc) returned 1 [0097.677] CloseHandle (hObject=0x1f8) returned 1 [0097.679] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0 [0097.679] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0x20 [0097.679] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51013229, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51013229, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5111e17c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fb0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX156A~1.0IL")) returned 0x7d2b98 [0097.679] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51013229, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51013229, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5111e17c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fb0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX156A~1.0IL")) returned 0 [0097.680] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0097.680] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 1 [0097.681] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlIzSnYzM1psTDV57TMyOTJ1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlizsnyzm1pstdv57tmyotj1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0097.681] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5111e17c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5111e17c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51229448, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f30, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX7871~1.0IL")) returned 1 [0097.681] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0097.681] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0097.682] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3f30 [0097.682] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0097.682] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0097.761] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3f30, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x3f30, lpOverlapped=0x0) returned 1 [0097.761] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3f40, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x3f40, lpOverlapped=0x0) returned 1 [0097.763] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.787] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.798] CloseHandle (hObject=0x1f8) returned 1 [0097.799] CloseHandle (hObject=0x1fc) returned 1 [0097.800] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0097.800] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0x20 [0097.800] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5111e17c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5111e17c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51229448, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f30, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX7871~1.0IL")) returned 0x7d2c58 [0097.801] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5111e17c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5111e17c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51229448, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f30, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX7871~1.0IL")) returned 0 [0097.801] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0097.801] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 1 [0097.802] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJFT5dMNVJEUm51NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljft5dmnvjeum51ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0097.802] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5124f516, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5124f516, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x514190af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39db0, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX4B53~1.0IL")) returned 1 [0097.802] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0097.802] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0097.803] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39db0 [0097.803] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0097.803] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0097.928] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x39db0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x39db0, lpOverlapped=0x0) returned 1 [0097.931] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x39dc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x39dc0, lpOverlapped=0x0) returned 1 [0097.935] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0097.963] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0097.974] CloseHandle (hObject=0x1fc) returned 1 [0097.974] CloseHandle (hObject=0x1f8) returned 1 [0098.554] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0098.555] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0x20 [0098.555] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5124f516, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5124f516, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x514190af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39db0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX4B53~1.0IL")) returned 0x7d2b18 [0098.555] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5124f516, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5124f516, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x514190af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39db0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX4B53~1.0IL")) returned 0 [0098.555] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0098.555] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 1 [0098.558] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlJYMmp1V3c2Ulgy1lpXdzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnljymmp1v3c2ulgy1lpxdzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0098.558] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53985426, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53985426, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53b4f183, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXDB01~1.0IL")) returned 1 [0098.558] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0098.558] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0098.558] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe730 [0098.558] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0098.559] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0098.681] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xe730, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xe730, lpOverlapped=0x0) returned 1 [0098.682] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xe740, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xe740, lpOverlapped=0x0) returned 1 [0098.683] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0098.713] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.725] CloseHandle (hObject=0x1f8) returned 1 [0098.725] CloseHandle (hObject=0x1fc) returned 1 [0098.727] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0098.728] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0098.728] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53985426, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53985426, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53b4f183, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXDB01~1.0IL")) returned 0x7d2998 [0098.728] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53985426, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53985426, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53b4f183, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe730, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXDB01~1.0IL")) returned 0 [0098.728] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0098.728] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 1 [0098.730] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0098.730] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5366426e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5366426e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53985426, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UXABFF~1.0IL")) returned 1 [0098.730] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0098.730] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0098.731] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x810 [0098.731] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0098.731] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0098.837] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x810, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x810, lpOverlapped=0x0) returned 1 [0098.837] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x820, lpOverlapped=0x0) returned 1 [0098.838] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0098.861] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.874] CloseHandle (hObject=0x1fc) returned 1 [0098.874] CloseHandle (hObject=0x1f8) returned 1 [0098.875] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0098.876] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0098.876] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5366426e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5366426e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53985426, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x7c0000, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UXABFF~1.0IL")) returned 0x7d2a58 [0098.876] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5366426e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5366426e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53985426, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x7c0000, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UXABFF~1.0IL")) returned 0 [0098.876] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0098.876] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 1 [0098.877] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNllXTmp1WE56M12WcGMyVjBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnllxtmp1we56m12wcgmyvjbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0098.877] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4f183, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53b4f183, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53c3407b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1830, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX6CB4~1.0IL")) returned 1 [0098.877] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0098.878] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0098.878] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1830 [0098.878] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0098.878] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0098.950] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1830, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1830, lpOverlapped=0x0) returned 1 [0098.950] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1840, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1840, lpOverlapped=0x0) returned 1 [0098.951] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0098.977] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0098.988] CloseHandle (hObject=0x1f8) returned 1 [0098.988] CloseHandle (hObject=0x1fc) returned 1 [0098.990] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0098.990] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0098.990] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4f183, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53b4f183, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53c3407b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1830, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX6CB4~1.0IL")) returned 0x7d29d8 [0098.990] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b4f183, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53b4f183, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53c3407b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1830, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX6CB4~1.0IL")) returned 0 [0098.990] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0098.991] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 1 [0098.992] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlozSnYzM1psM12WcE4tMXo4UzQ0Tm513DNpMTFj7TU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlozsnyzm1psm12wce4tmxo4uzq0tm513dnpmtfj7tu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0098.992] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c3407b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53c3407b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53f5511b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2670, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXCEC9~1.0IL")) returned 1 [0098.992] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0098.992] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0098.992] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2670 [0098.992] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0098.993] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0099.183] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2670, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2670, lpOverlapped=0x0) returned 1 [0099.183] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2680, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2680, lpOverlapped=0x0) returned 1 [0099.185] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0099.208] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.225] CloseHandle (hObject=0x1fc) returned 1 [0099.225] CloseHandle (hObject=0x1f8) returned 1 [0099.226] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0099.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0099.227] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c3407b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53c3407b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53f5511b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2670, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXCEC9~1.0IL")) returned 0x7d3098 [0099.227] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53c3407b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53c3407b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x53f5511b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2670, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXCEC9~1.0IL")) returned 0 [0099.227] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0099.227] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 1 [0099.228] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpHTm0zWFZwTG047jFTNDRO1TVsM254MWN5NTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlphtm0zwfzwtg047jftndro1tvsm254mwn5ntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0099.228] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f5511b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53f5511b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5411ec60, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8f90, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX338B~1.0IL")) returned 1 [0099.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0099.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0099.258] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8f90 [0099.258] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0099.258] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0099.359] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8f90, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8f90, lpOverlapped=0x0) returned 1 [0099.360] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8fa0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8fa0, lpOverlapped=0x0) returned 1 [0099.361] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0099.395] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.422] CloseHandle (hObject=0x1f8) returned 1 [0099.423] CloseHandle (hObject=0x1fc) returned 1 [0099.425] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0099.426] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0099.426] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f5511b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53f5511b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5411ec60, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8f90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX338B~1.0IL")) returned 0x7d3018 [0099.427] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f5511b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x53f5511b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5411ec60, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8f90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX338B~1.0IL")) returned 0 [0099.427] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0099.427] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 1 [0099.429] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlpYMmp1VzR0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlpymmp1vzr0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0099.429] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5143f3ef, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5143f3ef, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5165599a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX5939~1.0IL")) returned 1 [0099.429] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0099.429] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0099.430] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x610 [0099.430] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0099.430] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0099.554] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x610, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x610, lpOverlapped=0x0) returned 1 [0099.554] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x620, lpOverlapped=0x0) returned 1 [0099.555] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0099.580] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.591] CloseHandle (hObject=0x1fc) returned 1 [0099.591] CloseHandle (hObject=0x1f8) returned 1 [0099.592] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0099.593] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0x20 [0099.593] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5143f3ef, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5143f3ef, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5165599a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX5939~1.0IL")) returned 0x7d2a58 [0099.593] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5143f3ef, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5143f3ef, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5165599a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX5939~1.0IL")) returned 0 [0099.593] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0099.594] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 1 [0099.595] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55MNTlUVFM1NE4XNXYz3VU2M12OcE4qRTJM3md0M205NlpTNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55mntluvfm1ne4xnxyz3vu2m12oce4qrtjm3md0m205nlptntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0099.595] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5165599a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5165599a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x517d2b8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x920, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXF3D8~1.0IL")) returned 1 [0099.595] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0099.595] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0099.595] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x920 [0099.595] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0099.596] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0099.667] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x920, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x920, lpOverlapped=0x0) returned 1 [0099.667] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x930, lpOverlapped=0x0) returned 1 [0099.669] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0099.692] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.711] CloseHandle (hObject=0x1f8) returned 1 [0099.712] CloseHandle (hObject=0x1fc) returned 1 [0099.713] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0099.713] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0x20 [0099.713] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5165599a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5165599a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x517d2b8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x920, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXF3D8~1.0IL")) returned 0x7d2f58 [0099.714] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5165599a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5165599a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x517d2b8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x920, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXF3D8~1.0IL")) returned 0 [0099.714] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0099.714] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 1 [0099.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQ4T55WVmc2VDFOTlZWZzY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlq4t55wvmc2vdfotlzwzzy3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0099.715] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517d2b8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x517d2b8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5192f5b6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b50, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXEA5B~1.0IL")) returned 1 [0099.715] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0099.715] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0099.716] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17b50 [0099.716] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0099.716] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0099.823] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x17b50, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x17b50, lpOverlapped=0x0) returned 1 [0099.825] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x17b60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x17b60, lpOverlapped=0x0) returned 1 [0099.827] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0099.850] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.863] CloseHandle (hObject=0x1fc) returned 1 [0099.863] CloseHandle (hObject=0x1f8) returned 1 [0099.868] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0099.869] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0099.869] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517d2b8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x517d2b8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5192f5b6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b50, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXEA5B~1.0IL")) returned 0x7d2f58 [0099.869] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517d2b8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x517d2b8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5192f5b6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b50, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UXEA5B~1.0IL")) returned 0 [0099.869] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0099.869] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 1 [0099.871] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQyNW4U3T5wWlM1UDNtV58zM1JsTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqynw4u3t5wwlm1udntv58zm1jstg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0099.871] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192f5b6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5192f5b6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51a608aa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171b0, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX0C4E~1.0IL")) returned 1 [0099.871] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0099.872] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0099.872] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x171b0 [0099.872] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0099.872] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0099.943] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x171b0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x171b0, lpOverlapped=0x0) returned 1 [0099.945] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x171c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x171c0, lpOverlapped=0x0) returned 1 [0099.947] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0100.003] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.015] CloseHandle (hObject=0x1f8) returned 1 [0100.015] CloseHandle (hObject=0x1fc) returned 1 [0100.018] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0100.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0100.018] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192f5b6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5192f5b6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51a608aa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171b0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX0C4E~1.0IL")) returned 0x7d29d8 [0100.019] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192f5b6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5192f5b6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51a608aa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171b0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX0C4E~1.0IL")) returned 0 [0100.019] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0100.019] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 1 [0100.020] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlQzVjAzRzl2MX51UGRYUnMzMjlyTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlqzvjazrzl2mx51ugryunmzmjlytg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0100.021] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a86c41, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51a86c41, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51c507b8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX5CE0~1.0IL")) returned 1 [0100.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0100.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0100.021] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x197b0 [0100.021] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0100.022] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0100.170] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x197b0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x197b0, lpOverlapped=0x0) returned 1 [0100.173] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x197c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x197c0, lpOverlapped=0x0) returned 1 [0100.175] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0100.205] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.216] CloseHandle (hObject=0x1fc) returned 1 [0100.217] CloseHandle (hObject=0x1f8) returned 1 [0100.220] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0100.221] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0x20 [0100.221] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a86c41, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51a86c41, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51c507b8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX5CE0~1.0IL")) returned 0x7d2d58 [0100.221] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51a86c41, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51a86c41, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51c507b8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197b0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX5CE0~1.0IL")) returned 0 [0100.221] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0100.221] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 1 [0100.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlRI3DZZ7TVNN1c11546Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlri3dzz7tvnn1c11546z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0100.223] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c507b8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51c507b8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51dd60ab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafdf0, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX9FBE~1.0IL")) returned 1 [0100.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0100.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0100.224] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xafdf0 [0100.224] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0100.225] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0100.397] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xafdf0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xafdf0, lpOverlapped=0x0) returned 1 [0100.410] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xafe00, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xafe00, lpOverlapped=0x0) returned 1 [0100.430] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0100.463] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.511] CloseHandle (hObject=0x1f8) returned 1 [0100.511] CloseHandle (hObject=0x1fc) returned 1 [0100.526] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0100.526] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0100.526] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c507b8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51c507b8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51dd60ab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafdf0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX9FBE~1.0IL")) returned 0x7d2c18 [0100.527] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51c507b8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51c507b8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51dd60ab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafdf0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX9FBE~1.0IL")) returned 0 [0100.527] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0100.527] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 1 [0100.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMV21dmRDNVEzM2RsY24CcGRtOTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmv21dmrdnvezm2rsy24ccgrtotbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0xffffffff [0100.534] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd60ab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51dd60ab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51eff3bc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195c0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX5284~1.0IL")) returned 1 [0100.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0100.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0100.535] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x195c0 [0100.535] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0100.536] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0100.622] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x195c0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x195c0, lpOverlapped=0x0) returned 1 [0100.623] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x195d0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x195d0, lpOverlapped=0x0) returned 1 [0100.626] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0100.650] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.661] CloseHandle (hObject=0x1fc) returned 1 [0100.662] CloseHandle (hObject=0x1f8) returned 1 [0100.665] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0100.666] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0100.666] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd60ab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51dd60ab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51eff3bc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195c0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX5284~1.0IL")) returned 0x7d2f58 [0100.666] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51dd60ab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51dd60ab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x51eff3bc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195c0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr", cAlternateFileName="UX5284~1.0IL")) returned 0 [0100.666] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0100.666] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 1 [0100.668] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVHOTN1WEpRMzJsNmRDNVEzM2RsY24CdjFXNTBM3md0M205NlpTNXRjMjU2TVRZNjdDMTYzMjVsTG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvhotn1weprmzjsnmrdnvezm2rsy24cdjfxntbm3md0m205nlptnxrjmju2tvrznjddmtyzmjvstg4yddnbot56mglsznpy.0ilfzr")) returned 0xffffffff [0100.668] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51eff3bc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51eff3bc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x523c3dfd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7460, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX4365~1.0IL")) returned 1 [0100.668] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0100.668] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0100.669] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7460 [0100.669] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0100.669] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0100.745] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x7460, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x7460, lpOverlapped=0x0) returned 1 [0100.746] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x7470, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x7470, lpOverlapped=0x0) returned 1 [0100.747] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0100.770] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.783] CloseHandle (hObject=0x1f8) returned 1 [0100.783] CloseHandle (hObject=0x1fc) returned 1 [0100.786] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0100.786] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0100.786] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51eff3bc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51eff3bc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x523c3dfd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7460, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX4365~1.0IL")) returned 0x7d2c18 [0100.786] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51eff3bc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x51eff3bc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x523c3dfd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7460, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX4365~1.0IL")) returned 0 [0100.787] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0100.787] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 1 [0100.788] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnY43VZqZEM1UWNtOXF1V04wTG5ndDNtOTZ1UzV0YzI1N51UWTY3QzE2MzI13E46MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisny43vzqzem1uwntoxf1v04wtg5nddntotz1uzv0yzi1n51uwty3qze2mzi13e46mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0100.788] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x523ea081, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x523ea081, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x526beca1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6010, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX194D~1.0IL")) returned 1 [0100.788] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0100.788] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0100.789] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6010 [0100.789] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0100.789] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0100.896] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6010, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6010, lpOverlapped=0x0) returned 1 [0100.897] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6020, lpOverlapped=0x0) returned 1 [0100.898] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0100.928] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0100.939] CloseHandle (hObject=0x1fc) returned 1 [0100.940] CloseHandle (hObject=0x1f8) returned 1 [0100.941] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0100.942] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0100.942] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x523ea081, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x523ea081, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x526beca1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6010, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX194D~1.0IL")) returned 0x7d2b18 [0100.942] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x523ea081, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x523ea081, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x526beca1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6010, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX194D~1.0IL")) returned 0 [0100.942] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0100.942] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr")) returned 1 [0100.944] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ135l0Wm5JNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz135l0wm5jnjdhmxm6mglsznpy.0ilfzr")) returned 0xffffffff [0100.944] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x526beca1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x526beca1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5296d661, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UXB84A~1.0IL")) returned 1 [0100.944] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0100.944] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0100.944] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x63d0 [0100.945] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0100.945] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0101.012] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x63d0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x63d0, lpOverlapped=0x0) returned 1 [0101.017] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x63e0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x63e0, lpOverlapped=0x0) returned 1 [0101.018] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0101.041] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0101.052] CloseHandle (hObject=0x1f8) returned 1 [0101.053] CloseHandle (hObject=0x1fc) returned 1 [0101.054] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0101.055] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0101.055] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x526beca1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x526beca1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5296d661, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UXB84A~1.0IL")) returned 0x7d29d8 [0101.055] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x526beca1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x526beca1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5296d661, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UXB84A~1.0IL")) returned 0 [0101.055] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0101.055] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 1 [0101.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 0xffffffff [0101.057] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296d661, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5296d661, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x52d4d566, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6010, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX1407~1.0IL")) returned 1 [0101.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0101.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0101.058] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6010 [0101.058] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0101.058] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0101.142] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6010, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x6010, lpOverlapped=0x0) returned 1 [0101.143] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6020, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x6020, lpOverlapped=0x0) returned 1 [0101.145] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0101.197] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0101.223] CloseHandle (hObject=0x1fc) returned 1 [0101.223] CloseHandle (hObject=0x1f8) returned 1 [0101.225] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0101.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0101.226] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296d661, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5296d661, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x52d4d566, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6010, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX1407~1.0IL")) returned 0x7d2f58 [0101.226] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296d661, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5296d661, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x52d4d566, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6010, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX1407~1.0IL")) returned 0 [0101.226] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0101.226] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr")) returned 1 [0101.227] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVISnYzMl52UTNWc2RIVnl1UzV0YzI1N51UWTZ1WE10Wl2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvisnyzml52utnwc2rivnl1uzv0yzi1n51uwtz1we10wl2nnjdhmxm6mglsznpy.0ilfzr")) returned 0xffffffff [0101.227] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d4d566, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x52d4d566, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x530484d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX3B9D~1.0IL")) returned 1 [0101.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0101.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0101.231] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12e60 [0101.231] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0101.232] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0101.390] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x12e60, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x12e60, lpOverlapped=0x0) returned 1 [0101.391] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x12e70, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x12e70, lpOverlapped=0x0) returned 1 [0101.393] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0101.555] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0101.567] CloseHandle (hObject=0x1f8) returned 1 [0101.568] CloseHandle (hObject=0x1fc) returned 1 [0101.570] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0 [0101.570] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0x20 [0101.571] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d4d566, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x52d4d566, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x530484d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e60, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX3B9D~1.0IL")) returned 0x7d2f58 [0101.571] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52d4d566, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x52d4d566, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x530484d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e60, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX3B9D~1.0IL")) returned 0 [0101.571] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0101.571] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr")) returned 1 [0101.572] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlVIVm5zR246MUdW7U4sQjFZ3TRwYzIy3GNpNTRMVzV2M21VNjNYTnBM15UyTG5ndDNtOTZ1UzU0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlvivm5zr246mudw7u4sqjfz3trwyziy3gnpntrmvzv2m21vnjnytnbm15uytg5nddntotz1uzu0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0101.572] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530484d1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x530484d1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x533693f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x15390, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX81E2~1.0IL")) returned 1 [0101.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0101.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0101.573] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15390 [0101.573] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0101.573] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0101.686] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x15390, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x15390, lpOverlapped=0x0) returned 1 [0101.746] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x153a0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x153a0, lpOverlapped=0x0) returned 1 [0101.748] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0101.771] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0101.798] CloseHandle (hObject=0x1fc) returned 1 [0101.798] CloseHandle (hObject=0x1f8) returned 1 [0101.801] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0101.801] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0x20 [0101.802] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530484d1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x530484d1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x533693f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x15390, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX81E2~1.0IL")) returned 0x7d2998 [0101.802] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x530484d1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x530484d1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x533693f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x15390, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX81E2~1.0IL")) returned 0 [0101.802] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0101.802] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 1 [0101.804] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlYyOXl1QzVYMzNKNU46Z3Qz3T52WlM1dGMyNTZNVF52N0M4NjMyNW4M3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlyyoxl1qzvymznknu46z3qz3t52wlm1dgmyntznvf52n0m4njmynw4m3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0101.804] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533693f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x533693f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5366426e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab20, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXD553~1.0IL")) returned 1 [0101.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0101.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0101.804] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ab20 [0101.804] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0101.805] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0101.925] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ab20, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2ab20, lpOverlapped=0x0) returned 1 [0101.929] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2ab30, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2ab30, lpOverlapped=0x0) returned 1 [0101.933] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0102.003] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0102.015] CloseHandle (hObject=0x1f8) returned 1 [0102.015] CloseHandle (hObject=0x1fc) returned 1 [0102.024] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0102.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0x20 [0102.026] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533693f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x533693f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5366426e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab20, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXD553~1.0IL")) returned 0x7d2b18 [0102.026] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x533693f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x533693f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5366426e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab20, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UXD553~1.0IL")) returned 0 [0102.026] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0102.026] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 1 [0102.029] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNlZt3Ho4Vzg2Vm1s7jFXODY3QzE2MzI13E4tMXo4UzQ0Tm51NE4XNXYz3VU2N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnlzt3ho4vzg2vm1s7jfxody3qze2mzi13e4tmxo4uzq0tm51ne4xnxyz3vu2n0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0102.029] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50237687, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50237687, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50427483, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2810, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX496E~1.0IL")) returned 1 [0102.029] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0102.029] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0102.030] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb2810 [0102.030] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0102.030] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0102.197] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xb2810, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xb2810, lpOverlapped=0x0) returned 1 [0102.210] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xb2820, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xb2820, lpOverlapped=0x0) returned 1 [0102.355] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0102.425] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0102.437] CloseHandle (hObject=0x1fc) returned 1 [0102.437] CloseHandle (hObject=0x1f8) returned 1 [0102.450] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0 [0102.451] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0x20 [0102.451] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50237687, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50237687, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50427483, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2810, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX496E~1.0IL")) returned 0x7d2998 [0102.451] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50237687, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50237687, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50427483, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2810, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX496E~1.0IL")) returned 0 [0102.451] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0102.451] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 1 [0102.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmMyMjJj3VY1TDU53Vpt3Gp1UzU0TFc1djNtVTYzWE5wTGpFM546Z3Qz3T52WlM1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmmymjjj3vy1tdu53vpt3gp1uzu0tfc1djntvtyzwe5wtgpfm546z3qz3t52wlm1ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0102.573] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5044da70, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5044da70, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5057ea83, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX6F89~1.0IL")) returned 1 [0102.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0102.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0102.574] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x68c0 [0102.574] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0102.574] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0102.766] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x68c0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x68c0, lpOverlapped=0x0) returned 1 [0102.767] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x68d0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x68d0, lpOverlapped=0x0) returned 1 [0102.769] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0102.792] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0102.901] CloseHandle (hObject=0x1f8) returned 1 [0102.901] CloseHandle (hObject=0x1fc) returned 1 [0102.905] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0102.906] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0102.906] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5044da70, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5044da70, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5057ea83, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX6F89~1.0IL")) returned 0x7d2f58 [0102.906] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5044da70, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5044da70, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5057ea83, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr", cAlternateFileName="UX6F89~1.0IL")) returned 0 [0102.906] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0102.907] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 1 [0102.908] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNHOTN1WEp3MzJsNmRHMTE4UzV0YzI1N51UWTZ1VzR0ZF2NNjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnhotn1wep3mzjsnmrhmte4uzv0yzi1n51uwtz1vzr0zf2nnjdhmxm6mglsznpy.0ilfzr")) returned 0xffffffff [0102.908] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a4cd8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x505a4cd8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x506afcc8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX8749~1.0IL")) returned 1 [0102.909] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0102.909] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0102.909] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80c0 [0102.909] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0102.910] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0103.026] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x80c0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x80c0, lpOverlapped=0x0) returned 1 [0103.027] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x80d0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x80d0, lpOverlapped=0x0) returned 1 [0103.028] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0103.100] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.111] CloseHandle (hObject=0x1fc) returned 1 [0103.112] CloseHandle (hObject=0x1f8) returned 1 [0103.113] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0103.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0103.114] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a4cd8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x505a4cd8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x506afcc8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX8749~1.0IL")) returned 0x7d2a18 [0103.114] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a4cd8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x505a4cd8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x506afcc8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr", cAlternateFileName="UX8749~1.0IL")) returned 0 [0103.114] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0103.114] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 1 [0103.116] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnY43VZqZEc4MTFTNXRjMjU2TVRZNlpXNHR5WE02N0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisny43vzqzec4mtftnxrjmju2tvrznlpxnhr5we02n0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0103.116] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506afcc8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x506afcc8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50853652, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXB11C~1.0IL")) returned 1 [0103.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0103.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0103.116] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x810 [0103.116] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0103.117] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0103.239] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x810, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x810, lpOverlapped=0x0) returned 1 [0103.240] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x820, lpOverlapped=0x0) returned 1 [0103.241] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0103.264] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.277] CloseHandle (hObject=0x1f8) returned 1 [0103.277] CloseHandle (hObject=0x1fc) returned 1 [0103.280] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0103.281] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0103.281] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506afcc8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x506afcc8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50853652, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXB11C~1.0IL")) returned 0x7d2c98 [0103.281] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506afcc8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x506afcc8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50853652, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x810, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UXB11C~1.0IL")) returned 0 [0103.281] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0103.281] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 1 [0103.282] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNISnYzMlpwM21jNjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnisnyzmlpwm21jnjnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0103.282] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50853652, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50853652, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50a1d2c9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3750, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX2516~1.0IL")) returned 1 [0103.282] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0103.282] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0103.283] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3750 [0103.283] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0103.283] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0103.356] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3750, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x3750, lpOverlapped=0x0) returned 1 [0103.357] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x3760, lpOverlapped=0x0) returned 1 [0103.359] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0103.384] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.396] CloseHandle (hObject=0x1fc) returned 1 [0103.396] CloseHandle (hObject=0x1f8) returned 1 [0103.397] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0103.398] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0103.398] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50853652, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50853652, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50a1d2c9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3750, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX2516~1.0IL")) returned 0x7d2f58 [0103.398] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50853652, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50853652, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50a1d2c9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3750, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="UX2516~1.0IL")) returned 0 [0103.398] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0103.398] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 1 [0103.399] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmNIVm5zR246MUdW7TNYVnBM3TF6MVM0NE5pNWwz1TE4Y351NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmnivm5zr246mudw7tnyvnbm3tf6mvm0ne5pnwwz1te4y351ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0103.400] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a69770, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50a69770, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50c59847, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13120, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX3EFC~1.0IL")) returned 1 [0103.400] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0103.400] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0103.400] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13120 [0103.400] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0103.401] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0103.527] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x13120, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x13120, lpOverlapped=0x0) returned 1 [0103.529] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x13130, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x13130, lpOverlapped=0x0) returned 1 [0103.531] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0103.559] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.570] CloseHandle (hObject=0x1f8) returned 1 [0103.571] CloseHandle (hObject=0x1fc) returned 1 [0103.573] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0103.574] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0103.574] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a69770, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50a69770, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50c59847, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13120, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX3EFC~1.0IL")) returned 0x7d2998 [0103.574] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a69770, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50a69770, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50c59847, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13120, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr", cAlternateFileName="UX3EFC~1.0IL")) returned 0 [0103.574] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0103.574] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 1 [0103.576] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmQyOXl1RzE4MVM1dGMyNTZNVF52Wlc0dGRYTTY3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmqyoxl1rze4mvm1dgmyntznvf52wlc0dgrytty3rzfzljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0103.576] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c59847, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50c59847, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50e95aaa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0cd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX4141~1.0IL")) returned 1 [0103.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0103.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0103.577] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0cd0 [0103.577] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0103.577] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0103.653] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xf0cd0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xf0cd0, lpOverlapped=0x0) returned 1 [0103.671] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xf0ce0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xf0ce0, lpOverlapped=0x0) returned 1 [0103.692] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0103.720] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.732] CloseHandle (hObject=0x1fc) returned 1 [0103.732] CloseHandle (hObject=0x1f8) returned 1 [0103.752] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0 [0103.753] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0x20 [0103.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c59847, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50c59847, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50e95aaa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0cd0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX4141~1.0IL")) returned 0x7d2cd8 [0103.753] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c59847, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x50c59847, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x50e95aaa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0cd0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="UX4141~1.0IL")) returned 0 [0103.753] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0103.753] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 1 [0103.762] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\UXpKU1RXRjY4V1psYzNRNmRt3Ho4Vzl0ZFc1NjNYTnBM15UyTG1WN54YVnpM3jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\uxpku1rxrjy4v1psyznrnmrt3ho4vzl0zfc1njnytnbm15uytg1wn54yvnpm3jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0103.762] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5411ec60, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5411ec60, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x543cd7b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="VFDS1M~1.0IL")) returned 1 [0103.762] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0103.762] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\V5Z5czFtTnRPWG96TW4vd1dEQTUzVnB0M0dwMVZq3FFX3TE4Y0Y17VZsVjFW7lJzTTF5V01HTjYzRUo4TW4ZMlpFVTB53G93T1R1TjE1RTBU3TU4T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\v5z5czfttnrpwg96tw4vd1deqtuzvnb0m0dwmvzq3ffx3te4y0y17vzsvjfw7ljzttf5v01htjyzruo4tw4zmlpfvtb53g93t1r1tje1rtbu3tu4t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0103.762] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcc0 [0103.762] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0103.763] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0103.930] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcc0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xcc0, lpOverlapped=0x0) returned 1 [0103.931] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcd0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xcd0, lpOverlapped=0x0) returned 1 [0103.932] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0103.956] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0103.967] CloseHandle (hObject=0x1f8) returned 1 [0103.967] CloseHandle (hObject=0x1fc) returned 1 [0103.968] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\V5Z5czFtTnRPWG96TW4vd1dEQTUzVnB0M0dwMVZq3FFX3TE4Y0Y17VZsVjFW7lJzTTF5V01HTjYzRUo4TW4ZMlpFVTB53G93T1R1TjE1RTBU3TU4T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\v5z5czfttnrpwg96tw4vd1deqtuzvnb0m0dwmvzq3ffx3te4y0y17vzsvjfw7ljzttf5v01htjyzruo4tw4zmlpfvtb53g93t1r1tje1rtbu3tu4t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0 [0103.969] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\V5Z5czFtTnRPWG96TW4vd1dEQTUzVnB0M0dwMVZq3FFX3TE4Y0Y17VZsVjFW7lJzTTF5V01HTjYzRUo4TW4ZMlpFVTB53G93T1R1TjE1RTBU3TU4T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\v5z5czfttnrpwg96tw4vd1deqtuzvnb0m0dwmvzq3ffx3te4y0y17vzsvjfw7ljzttf5v01htjyzruo4tw4zmlpfvtb53g93t1r1tje1rtbu3tu4t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0x20 [0103.969] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5411ec60, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5411ec60, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x543cd7b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcc0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="VFDS1M~1.0IL")) returned 0x7d2f58 [0103.969] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5411ec60, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5411ec60, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x543cd7b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xcc0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr", cAlternateFileName="VFDS1M~1.0IL")) returned 0 [0103.970] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0103.970] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr")) returned 1 [0103.971] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEU0dlowOTZN15E0Tm51NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zeu0dlowotzn15e0tm51ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0103.971] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5443fe46, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5443fe46, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5454cfab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VFDS1M~2.0IL")) returned 1 [0103.971] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0103.971] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\V5Z5czFtTnRPWG96TW4vd1dEQTUzVnB0M0dwMVZq3FFX3TE4Y0Y17VZsVjFW7lJzTTF5V01HTjYzRUo4TW4ZMlpFVjFN155IT5VOWlYwNXlUV3BCT5U1cE5UUXpWM2M1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\v5z5czfttnrpwg96tw4vd1deqtuzvnb0m0dwmvzq3ffx3te4y0y17vzsvjfw7ljzttf5v01htjyzruo4tw4zmlpfvjfn155it5vowlywnxluv3bct5u1ce5uuxpwm2m1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0103.972] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd00 [0103.972] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0103.972] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.080] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xd00, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xd00, lpOverlapped=0x0) returned 1 [0104.081] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xd10, lpOverlapped=0x0) returned 1 [0104.082] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.104] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.118] CloseHandle (hObject=0x1fc) returned 1 [0104.118] CloseHandle (hObject=0x1f8) returned 1 [0104.119] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\V5Z5czFtTnRPWG96TW4vd1dEQTUzVnB0M0dwMVZq3FFX3TE4Y0Y17VZsVjFW7lJzTTF5V01HTjYzRUo4TW4ZMlpFVjFN155IT5VOWlYwNXlUV3BCT5U1cE5UUXpWM2M1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\v5z5czfttnrpwg96tw4vd1deqtuzvnb0m0dwmvzq3ffx3te4y0y17vzsvjfw7ljzttf5v01htjyzruo4tw4zmlpfvjfn155it5vowlywnxluv3bct5u1ce5uuxpwm2m1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0104.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\V5Z5czFtTnRPWG96TW4vd1dEQTUzVnB0M0dwMVZq3FFX3TE4Y0Y17VZsVjFW7lJzTTF5V01HTjYzRUo4TW4ZMlpFVjFN155IT5VOWlYwNXlUV3BCT5U1cE5UUXpWM2M1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\v5z5czfttnrpwg96tw4vd1deqtuzvnb0m0dwmvzq3ffx3te4y0y17vzsvjfw7ljzttf5v01htjyzruo4tw4zmlpfvjfn155it5vowlywnxluv3bct5u1ce5uuxpwm2m1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0104.120] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5443fe46, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5443fe46, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5454cfab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VFDS1M~2.0IL")) returned 0x7d2a58 [0104.120] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5443fe46, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5443fe46, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5454cfab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xd00, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VFDS1M~2.0IL")) returned 0 [0104.120] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0104.120] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 1 [0104.121] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VFds1mNtOXozMlowWDA53Vpt3Gp1VjlQWm11cF5yVlV1VzRsM1dWMGN63EJ1MlY2ZEV1MjNHNENZV05yTWpBNE5pNTQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vfds1mntoxozmlowwda53vpt3gp1vjlqwm11cf5yvlv1vzrsm1dwmgn63ej1mly2zev1mjnhnenzv05ytwpbne5pntqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0104.121] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x546ee8f9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x546ee8f9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54845ec3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a70, dwReserved0=0x7e8378, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2WS1~1.0IL")) returned 1 [0104.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVU3GQzN2pOVU5YZFgzR00wVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvu3gqzn2povu5yzfgzr00wvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.122] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4a70 [0104.122] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0104.123] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.211] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x4a70, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x4a70, lpOverlapped=0x0) returned 1 [0104.212] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x4a80, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x4a80, lpOverlapped=0x0) returned 1 [0104.213] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.239] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.250] CloseHandle (hObject=0x1f8) returned 1 [0104.250] CloseHandle (hObject=0x1fc) returned 1 [0104.251] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVU3GQzN2pOVU5YZFgzR00wVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvu3gqzn2povu5yzfgzr00wvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0104.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVU3GQzN2pOVU5YZFgzR00wVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvu3gqzn2povu5yzfgzr00wvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0104.252] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x546ee8f9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x546ee8f9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54845ec3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a70, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2WS1~1.0IL")) returned 0x7d29d8 [0104.252] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x546ee8f9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x546ee8f9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54845ec3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4a70, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2WS1~1.0IL")) returned 0 [0104.252] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0104.252] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0104.254] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515Tld37jNUNXdX3GM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515tld37jnunxdx3gm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0104.254] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549a469a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x549a469a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54b21afe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2WS1~3.0IL")) returned 1 [0104.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YT55NVEpYWTB5TjdWWnFRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05yt55nvepywtb5tjdwwnfrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0104.254] CloseHandle (hObject=0x1fc) returned 1 [0104.254] CloseHandle (hObject=0xffffffff) returned 1 [0104.254] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YT55NVEpYWTB5TjdWWnFRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05yt55nvepywtb5tjdwwnfrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0104.255] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YT55NVEpYWTB5TjdWWnFRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05yt55nvepywtb5tjdwwnfrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0104.255] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549a469a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x549a469a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54b21afe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2WS1~3.0IL")) returned 0x7d2a98 [0104.255] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x549a469a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x549a469a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54b21afe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2WS1~3.0IL")) returned 0 [0104.255] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0104.255] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0104.256] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0104.256] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54845ec3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54845ec3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5497e319, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x198a0, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2WS1~2.0IL")) returned 1 [0104.256] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.256] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YT55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05yt55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.256] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x198a0 [0104.256] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0104.257] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.388] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x198a0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x198a0, lpOverlapped=0x0) returned 1 [0104.390] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x198b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x198b0, lpOverlapped=0x0) returned 1 [0104.393] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.419] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.430] CloseHandle (hObject=0x1fc) returned 1 [0104.431] CloseHandle (hObject=0x1f8) returned 1 [0104.434] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YT55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05yt55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0104.434] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YT55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05yt55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0104.435] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54845ec3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54845ec3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5497e319, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x198a0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2WS1~2.0IL")) returned 0x7d2c98 [0104.435] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54845ec3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54845ec3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5497e319, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x198a0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2WS1~2.0IL")) returned 0 [0104.435] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0104.435] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0104.437] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0104.437] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c52f1f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54c52f1f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54daa58b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f420, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVA093~1.0IL")) returned 1 [0104.437] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.437] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YTlVXSEJMVFRKU05VNVlV3XBOMW4V7VZGWlNXNTV4W5VSTlZG3DZUV3BXYzFSSE5I3DVSRTVDVDFRMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05ytlvxsejmvfrku05vnvlv3xbomw4v7vzgwlnxntv4w5vstlzg3dzuv3bxyzfsse5i3dvsrtvdvdfrmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0104.437] CloseHandle (hObject=0x1f8) returned 1 [0104.437] CloseHandle (hObject=0xffffffff) returned 1 [0104.437] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YTlVXSEJMVFRKU05VNVlV3XBOMW4V7VZGWlNXNTV4W5VSTlZG3DZUV3BXYzFSSE5I3DVSRTVDVDFRMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05ytlvxsejmvfrku05vnvlv3xbomw4v7vzgwlnxntv4w5vstlzg3dzuv3bxyzfsse5i3dvsrtvdvdfrmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0104.438] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YTlVXSEJMVFRKU05VNVlV3XBOMW4V7VZGWlNXNTV4W5VSTlZG3DZUV3BXYzFSSE5I3DVSRTVDVDFRMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05ytlvxsejmvfrku05vnvlv3xbomw4v7vzgwlnxntv4w5vstlzg3dzuv3bxyzfsse5i3dvsrtvdvdfrmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0104.438] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c52f1f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54c52f1f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54daa58b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f420, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVA093~1.0IL")) returned 0x7d3098 [0104.438] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54c52f1f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54c52f1f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54daa58b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x4f420, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVA093~1.0IL")) returned 0 [0104.438] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0104.438] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0104.439] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLTTJSNU5YUmpN1lUyVFZSW55qZERNVFl6TWpWc1RHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblttjsnu5yumpn1luyvfzsw55qzernvfl6twpwc1rhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0104.439] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b21afe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54b21afe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54c2ce64, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b70, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2WS1~4.0IL")) returned 1 [0104.439] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.439] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YTlVXSEJMW5V5U1dFNVVXWHBYUlRWM1ZFZHdSNTA4T52SVzFscE5WMFo4Tm4SSE5I3DVSRTVDVDFRMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05ytlvxsejmw5v5u1dfnvvxwhbyulrwm1zfzhdsnta4t52svzfsce5wmfo4tm4sse5i3dvsrtvdvdfrmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0104.439] CloseHandle (hObject=0x1f8) returned 1 [0104.439] CloseHandle (hObject=0xffffffff) returned 1 [0104.439] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YTlVXSEJMW5V5U1dFNVVXWHBYUlRWM1ZFZHdSNTA4T52SVzFscE5WMFo4Tm4SSE5I3DVSRTVDVDFRMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05ytlvxsejmw5v5u1dfnvvxwhbyulrwm1zfzhdsnta4t52svzfsce5wmfo4tm4sse5i3dvsrtvdvdfrmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0104.440] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTVWMjB3T5ZZd05YTlVXSEJMW5V5U1dFNVVXWHBYUlRWM1ZFZHdSNTA4T52SVzFscE5WMFo4Tm4SSE5I3DVSRTVDVDFRMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtvwmjb3t5zzd05ytlvxsejmw5v5u1dfnvvxwhbyulrwm1zfzhdsnta4t52svzfsce5wmfo4tm4sse5i3dvsrtvdvdfrmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0104.440] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b21afe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54b21afe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54c2ce64, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b70, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2WS1~4.0IL")) returned 0x7d2f58 [0104.440] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b21afe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54b21afe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x54c2ce64, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6b70, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2WS1~4.0IL")) returned 0 [0104.440] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0104.440] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0104.440] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1515V20wNFYwNXNUWHBLZEdSWE5UWXpXRTV3VEdwR501NHRW1lpNV0Z1NlRHNHl5RE5CT1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1515v20wnfywnxnuwhblzedswe5uwxpxrtv3vedwr501nhrw1lpnv0z1nlrhnhl5re5ct1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0104.441] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54daa58b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54daa58b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5500c88d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b50, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2ABC~1.0IL")) returned 1 [0104.441] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.441] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZWRzVSN245R1d6ZFVS75EwTjJwR1ZFNUVVNTg0V5Z17lRUSTFORTFYVGpWT1ZGRjZW155qTlU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzwrzvsn245r1d6zfvs75ewtjjwr1zfnuvvntg0v5z17lrustfortfyvgpwt1zgrjzw155qtlu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.442] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b50 [0104.442] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0104.442] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.551] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b50, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2b50, lpOverlapped=0x0) returned 1 [0104.552] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2b60, lpOverlapped=0x0) returned 1 [0104.553] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.576] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.590] CloseHandle (hObject=0x1f8) returned 1 [0104.590] CloseHandle (hObject=0x1fc) returned 1 [0104.591] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZWRzVSN245R1d6ZFVS75EwTjJwR1ZFNUVVNTg0V5Z17lRUSTFORTFYVGpWT1ZGRjZW155qTlU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzwrzvsn245r1d6zfvs75ewtjjwr1zfnuvvntg0v5z17lrustfortfyvgpwt1zgrjzw155qtlu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0 [0104.592] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZWRzVSN245R1d6ZFVS75EwTjJwR1ZFNUVVNTg0V5Z17lRUSTFORTFYVGpWT1ZGRjZW155qTlU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzwrzvsn245r1d6zfvs75ewtjjwr1zfnuvvntg0v5z17lrustfortfyvgpwt1zgrjzw155qtlu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0x20 [0104.592] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54daa58b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54daa58b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5500c88d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b50, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2ABC~1.0IL")) returned 0x7d2998 [0104.592] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54daa58b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x54daa58b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5500c88d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b50, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2ABC~1.0IL")) returned 0 [0104.592] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0104.592] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 1 [0104.593] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5R7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5r7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0104.593] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55035629, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55035629, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x551d6620, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2bb0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2A86~1.0IL")) returned 1 [0104.594] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.594] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZWRzVTTlZ5RVNqQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzwrzvttlz5rvnqqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.594] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bb0 [0104.594] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0104.595] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.669] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bb0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2bb0, lpOverlapped=0x0) returned 1 [0104.670] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2bc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2bc0, lpOverlapped=0x0) returned 1 [0104.671] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.696] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.707] CloseHandle (hObject=0x1fc) returned 1 [0104.707] CloseHandle (hObject=0x1f8) returned 1 [0104.709] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZWRzVTTlZ5RVNqQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzwrzvttlz5rvnqqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0104.709] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZWRzVTTlZ5RVNqQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzwrzvttlz5rvnqqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0104.709] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55035629, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55035629, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x551d6620, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2bb0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2A86~1.0IL")) returned 0x7d2f58 [0104.709] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55035629, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55035629, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x551d6620, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2bb0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2A86~1.0IL")) returned 0 [0104.709] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0104.710] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0104.711] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VG5SNVdESjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vg5snvdesjb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0104.711] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d6620, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x551d6620, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x553a0122, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x179b0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV79EB~1.0IL")) returned 1 [0104.711] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.711] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZW3XBCN24KNjNES55WRTUwVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzw3xbcn24knjnes55wrtuwvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.711] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x179b0 [0104.712] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0104.712] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.792] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x179b0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x179b0, lpOverlapped=0x0) returned 1 [0104.794] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x179c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x179c0, lpOverlapped=0x0) returned 1 [0104.796] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.821] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.832] CloseHandle (hObject=0x1f8) returned 1 [0104.832] CloseHandle (hObject=0x1fc) returned 1 [0104.836] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZW3XBCN24KNjNES55WRTUwVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzw3xbcn24knjnes55wrtuwvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0104.837] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1MTZW3XBCN24KNjNES55WRTUwVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1mtzw3xbcn24knjnes55wrtuwvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0104.837] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d6620, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x551d6620, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x553a0122, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x179b0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV79EB~1.0IL")) returned 0x7d2fd8 [0104.837] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d6620, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x551d6620, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x553a0122, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x179b0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV79EB~1.0IL")) returned 0 [0104.837] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0104.837] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0104.839] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO1516VmpB7lJ63DJNVE50TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo1516vmpb7lj63djnve50tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0104.839] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a0122, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x553a0122, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x554d9e5b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5bc0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2803~1.0IL")) returned 1 [0104.839] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0104.839] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1NUpNMFI4VzU4cVJUU55WNTA0W5V5TjdVNVVXNTVXUmpV7VYyNGpNR1JIVW4sVVZGNXpV3nBHNzU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1nupnmfi4vzu4cvjuu55wnta0w5v5tjdvnvvxntvxumpv7vyyngpnr1jivw4svvzgnxpv3nbhnzu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0104.839] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5bc0 [0104.840] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0104.840] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0104.947] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5bc0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x5bc0, lpOverlapped=0x0) returned 1 [0104.948] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5bd0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x5bd0, lpOverlapped=0x0) returned 1 [0104.949] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0104.977] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0104.997] CloseHandle (hObject=0x1fc) returned 1 [0104.998] CloseHandle (hObject=0x1f8) returned 1 [0104.999] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1NUpNMFI4VzU4cVJUU55WNTA0W5V5TjdVNVVXNTVXUmpV7VYyNGpNR1JIVW4sVVZGNXpV3nBHNzU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1nupnmfi4vzu4cvjuu55wnta0w5v5tjdvnvvxntvxumpv7vyyngpnr1jivw4svvzgnxpv3nbhnzu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0 [0105.000] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzE1NUpNMFI4VzU4cVJUU55WNTA0W5V5TjdVNVVXNTVXUmpV7VYyNGpNR1JIVW4sVVZGNXpV3nBHNzU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktze1nupnmfi4vzu4cvjuu55wnta0w5v5tjdvnvvxntvxumpv7vyyngpnr1jivw4svvzgnxpv3nbhnzu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0x20 [0105.000] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a0122, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x553a0122, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x554d9e5b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5bc0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2803~1.0IL")) returned 0x7d2f58 [0105.000] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a0122, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x553a0122, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x554d9e5b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x5bc0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2803~1.0IL")) returned 0 [0105.000] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.000] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 1 [0105.140] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO155JM0R1W51qRTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo155jm0r1w51qrtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.140] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5567dad6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5567dad6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x55788b4c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fc0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2106~1.0IL")) returned 1 [0105.140] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.140] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNF3DZVMjV1NzUwNGNITlVSRl54TjFSTjdVOVVT15ZWN24Vd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznf3dzvmjv1nzuwngnitlvsrl54tjfstjdvovvt15zwn24vd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.140] CloseHandle (hObject=0x1f8) returned 1 [0105.141] CloseHandle (hObject=0xffffffff) returned 1 [0105.141] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNF3DZVMjV1NzUwNGNITlVSRl54TjFSTjdVOVVT15ZWN24Vd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznf3dzvmjv1nzuwngnitlvsrl54tjfstjdvovvt15zwn24vd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0105.141] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNF3DZVMjV1NzUwNGNITlVSRl54TjFSTjdVOVVT15ZWN24Vd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznf3dzvmjv1nzuwngnitlvsrl54tjfstjdvovvt15zwn24vd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5567dad6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5567dad6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x55788b4c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fc0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2106~1.0IL")) returned 0x7d2d18 [0105.141] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5567dad6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5567dad6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x55788b4c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fc0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV2106~1.0IL")) returned 0 [0105.141] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0105.142] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 1 [0105.143] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3El6U25Z7504cHNURFY1N1RN7U9USjFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3el6u25z7504chnurfy1n1rn7u9usjfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.143] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55788b4c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55788b4c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x558b9e97, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f40, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VV26BE~1.0IL")) returned 1 [0105.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFcEdWRFY1VFU1V1M1VlYzVFU0VDVVMFdFNVlXWG96Vm4V7VRURXlUM55GT52GU1ZFcE5NMjE1TUUw7U1EV58zSEJVVG4SUjdsWXpZ7lZNMTVKd00wZDFO3U56T1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfcedwrfy1vfu1v1m1vlyzvfu0vdvvmfdfnvlxwg96vm4v7vrurxlum55gt52gu1zfce5nmje1tuuw7u1ev58zsejvvg4sujdswxpz7lznmtvkd00wzdfo3u56t1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.143] CloseHandle (hObject=0x1f8) returned 1 [0105.143] CloseHandle (hObject=0xffffffff) returned 1 [0105.143] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFcEdWRFY1VFU1V1M1VlYzVFU0VDVVMFdFNVlXWG96Vm4V7VRURXlUM55GT52GU1ZFcE5NMjE1TUUw7U1EV58zSEJVVG4SUjdsWXpZ7lZNMTVKd00wZDFO3U56T1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfcedwrfy1vfu1v1m1vlyzvfu0vdvvmfdfnvlxwg96vm4v7vrurxlum55gt52gu1zfce5nmje1tuuw7u1ev58zsejvvg4sujdswxpz7lznmtvkd00wzdfo3u56t1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0105.144] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFcEdWRFY1VFU1V1M1VlYzVFU0VDVVMFdFNVlXWG96Vm4V7VRURXlUM55GT52GU1ZFcE5NMjE1TUUw7U1EV58zSEJVVG4SUjdsWXpZ7lZNMTVKd00wZDFO3U56T1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfcedwrfy1vfu1v1m1vlyzvfu0vdvvmfdfnvlxwg96vm4v7vrurxlum55gt52gu1zfce5nmje1tuuw7u1ev58zsejvvg4sujdswxpz7lznmtvkd00wzdfo3u56t1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.144] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55788b4c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55788b4c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x558b9e97, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f40, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VV26BE~1.0IL")) returned 0x7d2918 [0105.144] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55788b4c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55788b4c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x558b9e97, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3f40, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VV26BE~1.0IL")) returned 0 [0105.144] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0105.144] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 1 [0105.144] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpGVDV5TU5WS5VV3TU4T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epgvdv5tu5ws5vv3tu4t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.145] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558b9e97, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x558b9e97, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x55fe0f77, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39dc0, dwReserved0=0x4e0031, dwReserved1=0x4e006d, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVD49C~1.0IL")) returned 1 [0105.145] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.145] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFcFpUVzF3TVZZ7ll6SlYzR2Q1TVc0d1dHUjZXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfcfpuvzf3tvzz7ll6slyzr2q1tvc0d1dhujzxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.145] CloseHandle (hObject=0x1f8) returned 1 [0105.145] CloseHandle (hObject=0xffffffff) returned 1 [0105.145] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFcFpUVzF3TVZZ7ll6SlYzR2Q1TVc0d1dHUjZXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfcfpuvzf3tvzz7ll6slyzr2q1tvc0d1dhujzxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0105.145] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFcFpUVzF3TVZZ7ll6SlYzR2Q1TVc0d1dHUjZXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfcfpuvzf3tvzz7ll6slyzr2q1tvc0d1dhujzxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.145] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558b9e97, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x558b9e97, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x55fe0f77, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39dc0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVD49C~1.0IL")) returned 0x7d3098 [0105.146] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x558b9e97, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x558b9e97, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x55fe0f77, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x39dc0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVD49C~1.0IL")) returned 0 [0105.146] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0105.146] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 1 [0105.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EpZTW1wMVYzYzJV3Gd5MW4wWGR6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3epztw1wmvyzyzjv3gd5mw4wwgr6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.146] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555000bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x555000bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x556578af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9220, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV5D0D~1.0IL")) returned 1 [0105.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFWllWRzF3TVZ5R55UWlVSRlpITVd3MTdWWjZjR28zV5ZVd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfwllwrzf3tvz5r55uwlvsrlpitvd3mtdwwjzjr28zv5zvd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.147] CloseHandle (hObject=0x1f8) returned 1 [0105.147] CloseHandle (hObject=0xffffffff) returned 1 [0105.147] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFWllWRzF3TVZ5R55UWlVSRlpITVd3MTdWWjZjR28zV5ZVd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfwllwrzf3tvz5r55uwlvsrlpitvd3mtdwwjzjr28zv5zvd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0105.147] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNFWllWRzF3TVZ5R55UWlVSRlpITVd3MTdWWjZjR28zV5ZVd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznfwllwrzf3tvz5r55uwlvsrlpitvd3mtdwwjzjr28zv5zvd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.147] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555000bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x555000bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x556578af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9220, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV5D0D~1.0IL")) returned 0x7d2c98 [0105.147] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x555000bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x555000bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x556578af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x9220, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV5D0D~1.0IL")) returned 0 [0105.147] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0105.148] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 1 [0105.148] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3EZYVG1wMVdFNTZURFZHMWw17VZ6cGo3VFUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ezyvg1wmvdfntzurfzhmww17vz6cgo3vfuwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.148] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5683b737, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5683b737, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x569dccd3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VVA62D~1.0IL")) returned 1 [0105.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRTBWRFU4VFU1VTNGVldSNTA0VDVVMFdFNVlXWG96Vm4V7VRURXlUM55GT52GU1ZFcE5NMjE1TUUw7U1EV58zSEJVVG4SUjdsWXpZ7lZNMTVKd00wZDFO3U56T1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrtbwrfu4vfu1vtngvldsnta0vdvvmfdfnvlxwg96vm4v7vrurxlum55gt52gu1zfce5nmje1tuuw7u1ev58zsejvvg4sujdswxpz7lznmtvkd00wzdfo3u56t1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.148] CloseHandle (hObject=0x1f8) returned 1 [0105.149] CloseHandle (hObject=0xffffffff) returned 1 [0105.149] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRTBWRFU4VFU1VTNGVldSNTA0VDVVMFdFNVlXWG96Vm4V7VRURXlUM55GT52GU1ZFcE5NMjE1TUUw7U1EV58zSEJVVG4SUjdsWXpZ7lZNMTVKd00wZDFO3U56T1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrtbwrfu4vfu1vtngvldsnta0vdvvmfdfnvlxwg96vm4v7vrurxlum55gt52gu1zfce5nmje1tuuw7u1ev58zsejvvg4sujdswxpz7lznmtvkd00wzdfo3u56t1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0 [0105.149] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRTBWRFU4VFU1VTNGVldSNTA0VDVVMFdFNVlXWG96Vm4V7VRURXlUM55GT52GU1ZFcE5NMjE1TUUw7U1EV58zSEJVVG4SUjdsWXpZ7lZNMTVKd00wZDFO3U56T1Q1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrtbwrfu4vfu1vtngvldsnta0vdvvmfdfnvlxwg96vm4v7vrurxlum55gt52gu1zfce5nmje1tuuw7u1ev58zsejvvg4sujdswxpz7lznmtvkd00wzdfo3u56t1q1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.149] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5683b737, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5683b737, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x569dccd3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VVA62D~1.0IL")) returned 0x7d2c98 [0105.149] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5683b737, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5683b737, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x569dccd3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x620, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VVA62D~1.0IL")) returned 0 [0105.149] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0105.149] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 1 [0105.150] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1TU5U3FVWR504T5U0WE5YWXozVlUyTTEyT2NFNHFSVEpNM215ME0yMDVO3HBUTlRR7lYzYzVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1tu5u3fvwr504t5u0we5ywxozvluytteyt2nfnhfsvepnm215me0ymdvo3hbutlrr7lyzyzvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.150] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x569dccd3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x569dccd3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56ae7d45, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x4e0031, dwReserved1=0x4e006d, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVF23B~1.0IL")) returned 1 [0105.150] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.150] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRTBWRFU4VjF1dFl6SldSRVpQV5c0MVY4cDZXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrtbwrfu4vjf1dfl6sldsrvpqv5c0mvy4cdzxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.150] CloseHandle (hObject=0x1f8) returned 1 [0105.150] CloseHandle (hObject=0xffffffff) returned 1 [0105.150] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRTBWRFU4VjF1dFl6SldSRVpQV5c0MVY4cDZXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrtbwrfu4vjf1dfl6sldsrvpqv5c0mvy4cdzxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0105.151] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRTBWRFU4VjF1dFl6SldSRVpQV5c0MVY4cDZXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrtbwrfu4vjf1dfl6sldsrvpqv5c0mvy4cdzxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.151] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x569dccd3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x569dccd3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56ae7d45, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVF23B~1.0IL")) returned 0x7d2f58 [0105.151] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x569dccd3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x569dccd3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56ae7d45, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x930, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVF23B~1.0IL")) returned 0 [0105.151] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.151] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 1 [0105.152] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FE0VDU1V1ZtYzJWREZPVG41V1p6WTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fe0vdu1v1ztyzjwrezpvg41v1p6wtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.152] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b0df80, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56b0df80, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56c654d2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b60, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVA7C9~1.0IL")) returned 1 [0105.152] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.152] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRjVU3GMwVlROVU5YZFgzRTA0VlVST2RGWTFPSHBOTVVw7lZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrjvu3gmwvlrovu5yzfgzrta0vlvst2rgwtfpshbotvvw7lzfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.152] CloseHandle (hObject=0x1f8) returned 1 [0105.152] CloseHandle (hObject=0xffffffff) returned 1 [0105.152] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRjVU3GMwVlROVU5YZFgzRTA0VlVST2RGWTFPSHBOTVVw7lZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrjvu3gmwvlrovu5yzfgzrta0vlvst2rgwtfpshbotvvw7lzfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0105.153] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRjVU3GMwVlROVU5YZFgzRTA0VlVST2RGWTFPSHBOTVVw7lZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrjvu3gmwvlrovu5yzfgzrta0vlvst2rgwtfpshbotvvw7lzfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.153] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b0df80, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56b0df80, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56c654d2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b60, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVA7C9~1.0IL")) returned 0x7d2918 [0105.153] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b0df80, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56b0df80, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56c654d2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x17b60, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVA7C9~1.0IL")) returned 0 [0105.153] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0105.153] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 1 [0105.154] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF5Tlc0VTNUNXdX3E04VUROdFY1OHpNMUpzVEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff5tlc0vtnunxdx3e04vurodfy1ohpnmupzvec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.154] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c8b6f2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56c8b6f2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56de2c86, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171c0, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV1C61~1.0IL")) returned 1 [0105.154] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.154] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRjZW3XBCN24KNjNES55XRFU0VlV5U1dWVjZUWHBOMW00NVZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrjzw3xbcn24knjnes55xrfu0vlv5u1dwvjzuwhbomw00nvzfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.154] CloseHandle (hObject=0x1f8) returned 1 [0105.154] CloseHandle (hObject=0xffffffff) returned 1 [0105.154] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRjZW3XBCN24KNjNES55XRFU0VlV5U1dWVjZUWHBOMW00NVZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrjzw3xbcn24knjnes55xrfu0vlv5u1dwvjzuwhbomw00nvzfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0105.155] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGRjZW3XBCN24KNjNES55XRFU0VlV5U1dWVjZUWHBOMW00NVZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngrjzw3xbcn24knjnes55xrfu0vlv5u1dwvjzuwhbomw00nvzfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.155] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c8b6f2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56c8b6f2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56de2c86, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171c0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV1C61~1.0IL")) returned 0x7d2d18 [0105.155] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56c8b6f2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56c8b6f2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56de2c86, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x171c0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV1C61~1.0IL")) returned 0 [0105.155] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0105.155] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 1 [0105.155] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FF6VmpB7lJ63DJNWDU4VUdSWVV6TXpN1m45VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3ff6vmpb7lj63djnwdu4vudswvv6txpn1m45vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.155] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56de2c86, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56de2c86, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56fd2b30, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197c0, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVB87B~1.0IL")) returned 1 [0105.156] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.156] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGS5pNMFI4V2p5VVY1NU9NV000TVRVME5s33pVWG96V5RV7VYyNE5NV1JIVF2sT1ZGcE9WNV54TTU0d1RUU584NTE1VG4jMFRUTnFT15JOTUVVMVQ4TTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngs5pnmfi4v2p5vvy1nu9nv000tvrvme5s33pvwg96v5rv7vyyne5nv1jivf2st1zgce9wnv54ttu0d1ruu584nte1vg4jmfrutnft15jotuvvmvq4ttb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.156] CloseHandle (hObject=0x1f8) returned 1 [0105.156] CloseHandle (hObject=0xffffffff) returned 1 [0105.156] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGS5pNMFI4V2p5VVY1NU9NV000TVRVME5s33pVWG96V5RV7VYyNE5NV1JIVF2sT1ZGcE9WNV54TTU0d1RUU584NTE1VG4jMFRUTnFT15JOTUVVMVQ4TTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngs5pnmfi4v2p5vvy1nu9nv000tvrvme5s33pvwg96v5rv7vyyne5nv1jivf2st1zgce9wnv54ttu0d1ruu584nte1vg4jmfrutnft15jotuvvmvq4ttb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0105.156] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGS5pNMFI4V2p5VVY1NU9NV000TVRVME5s33pVWG96V5RV7VYyNE5NV1JIVF2sT1ZGcE9WNV54TTU0d1RUU584NTE1VG4jMFRUTnFT15JOTUVVMVQ4TTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngs5pnmfi4v2p5vvy1nu9nv000tvrvme5s33pvwg96v5rv7vyyne5nv1jivf2st1zgce9wnv54ttu0d1ruu584nte1vg4jmfrutnft15jotuvvmvq4ttb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.156] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56de2c86, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56de2c86, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56fd2b30, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197c0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVB87B~1.0IL")) returned 0x7d2c98 [0105.156] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56de2c86, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56de2c86, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56fd2b30, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x197c0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVB87B~1.0IL")) returned 0 [0105.156] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0105.157] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 1 [0105.158] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FJJM0R1WjdUV55OMWM4MTU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fjjm0r1wjduv55omwm4mtu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.158] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57cad057, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57cad057, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57ee93d6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x153a0, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVF744~1.0IL")) returned 1 [0105.158] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.158] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNG3DVUMTJzTVZGNlZs3E43NTVMVG4VME5s33pVWG96V5RV7VYyNE5NV1JIVF2sT1ZGcE9WNV54TTU0d1RUU584NTE1VG4jMFRUTnFT15JOTUVVMVQ4TTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzng3dvumtjztvzgnlzs3e43ntvmvg4vme5s33pvwg96v5rv7vyyne5nv1jivf2st1zgce9wnv54ttu0d1ruu584nte1vg4jmfrutnft15jotuvvmvq4ttb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.158] CloseHandle (hObject=0x1f8) returned 1 [0105.158] CloseHandle (hObject=0xffffffff) returned 1 [0105.158] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNG3DVUMTJzTVZGNlZs3E43NTVMVG4VME5s33pVWG96V5RV7VYyNE5NV1JIVF2sT1ZGcE9WNV54TTU0d1RUU584NTE1VG4jMFRUTnFT15JOTUVVMVQ4TTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzng3dvumtjztvzgnlzs3e43ntvmvg4vme5s33pvwg96v5rv7vyyne5nv1jivf2st1zgce9wnv54ttu0d1ruu584nte1vg4jmfrutnft15jotuvvmvq4ttb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0105.159] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNG3DVUMTJzTVZGNlZs3E43NTVMVG4VME5s33pVWG96V5RV7VYyNE5NV1JIVF2sT1ZGcE9WNV54TTU0d1RUU584NTE1VG4jMFRUTnFT15JOTUVVMVQ4TTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzng3dvumtjztvzgnlzs3e43ntvmvg4vme5s33pvwg96v5rv7vyyne5nv1jivf2st1zgce9wnv54ttu0d1ruu584nte1vg4jmfrutnft15jotuvvmvq4ttb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.159] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57cad057, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57cad057, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57ee93d6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x153a0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVF744~1.0IL")) returned 0x7d2998 [0105.159] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57cad057, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57cad057, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57ee93d6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x153a0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVF744~1.0IL")) returned 0 [0105.159] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0105.159] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 1 [0105.161] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fl5T12sMVF6VllN755LTlU0NlozUXozVDUyV24NMWRHTXlOVFpOV5Y1M54wTTRO1515Tlc0TTNqSjBNMEU1T1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fl5t12smvf6vlln755ltlu0nlozuxozvduyv24nmwrhtxlovfpov5y1m54wttro1515tlc0ttnqsjbnmeu1t1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.161] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ee93d6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57ee93d6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x580ff6d8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab30, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVE062~1.0IL")) returned 1 [0105.161] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.161] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGcDBNMDJ2T5Z1Nlp6SlczVEZ6TjJwR1dFOUVXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngcdbnmdj2t5z1nlp6slczvez6tjjwr1dfouvxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.161] CloseHandle (hObject=0x1f8) returned 1 [0105.161] CloseHandle (hObject=0xffffffff) returned 1 [0105.161] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGcDBNMDJ2T5Z1Nlp6SlczVEZ6TjJwR1dFOUVXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngcdbnmdj2t5z1nlp6slczvez6tjjwr1dfouvxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0 [0105.161] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGcDBNMDJ2T5Z1Nlp6SlczVEZ6TjJwR1dFOUVXVE5SNzVV7VRYcEpNVE5GT52STldHODBWWHBSTUZSdE5UR59SVFJZVGwyWjdqTldWVEpPTUdNMF5zNTB575ZYT5cwMzM1NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngcdbnmdj2t5z1nlp6slczvez6tjjwr1dfouvxve5snzvv7vrycepnve5gt52stldhodbwwhbstuzsde5ur59svfjzvgwywjdqtldwvepptudnmf5zntb575zyt5cwmzm1ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0105.161] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ee93d6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57ee93d6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x580ff6d8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab30, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVE062~1.0IL")) returned 0x7d2998 [0105.162] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57ee93d6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57ee93d6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x580ff6d8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2ab30, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVE062~1.0IL")) returned 0 [0105.162] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0105.162] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 1 [0105.164] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3Fp0M02vNFZ6ZzJW3TFzN2pGWE9EWTNR75UyTXpJMTNFNHRNWG80VXpRMFRtNTFORTRYTl2Z7jNWVTJOMGM0Y350dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fp0m02vnfz6zzjw3tfzn2pgwe9ewtnr75uytxpjmtnfnhrnwg80vxprmfrtntfortrytl2z7jnwvtjomgm0y350dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.164] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572cda74, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x572cda74, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x573fee39, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195d0, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", cAlternateFileName="VV83FA~1.0IL")) returned 1 [0105.164] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.164] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5lUMVJPTVZ5RmNGS543NXB6VG04U1JFNVdSWHBOTW4K7ldUSTBRMlJ4UmwyT1ZFS55NMjE1TUUw7U1EV58zSEJVVGwyUzE1MXFWVEpVVm4KMVRtcDVSRTFVV12wTjFsWnpWRWMwN1dSRVQ1SlBWRFUyVFV5c2M4cDZjSDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5lumvjptvz5rmngs543nxb6vg04u1jfnvdswhbotw4k7ldustbrmlj4umwyt1zfs55nmje1tuuw7u1ev58zsejvvgwyuze1mxfwvepvvm4kmvrtcdvsrtfvv12wtjfswnpwrwmwn1dsrvq1slbwrfuyvfv5c2m4cdzjsdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.164] CloseHandle (hObject=0x1f8) returned 1 [0105.164] CloseHandle (hObject=0xffffffff) returned 1 [0105.164] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5lUMVJPTVZ5RmNGS543NXB6VG04U1JFNVdSWHBOTW4K7ldUSTBRMlJ4UmwyT1ZFS55NMjE1TUUw7U1EV58zSEJVVGwyUzE1MXFWVEpVVm4KMVRtcDVSRTFVV12wTjFsWnpWRWMwN1dSRVQ1SlBWRFUyVFV5c2M4cDZjSDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5lumvjptvz5rmngs543nxb6vg04u1jfnvdswhbotw4k7ldustbrmlj4umwyt1zfs55nmje1tuuw7u1ev58zsejvvgwyuze1mxfwvepvvm4kmvrtcdvsrtfvv12wtjfswnpwrwmwn1dsrvq1slbwrfuyvfv5c2m4cdzjsdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0105.165] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5lUMVJPTVZ5RmNGS543NXB6VG04U1JFNVdSWHBOTW4K7ldUSTBRMlJ4UmwyT1ZFS55NMjE1TUUw7U1EV58zSEJVVGwyUzE1MXFWVEpVVm4KMVRtcDVSRTFVV12wTjFsWnpWRWMwN1dSRVQ1SlBWRFUyVFV5c2M4cDZjSDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5lumvjptvz5rmngs543nxb6vg04u1jfnvdswhbotw4k7ldustbrmlj4umwyt1zfs55nmje1tuuw7u1ev58zsejvvgwyuze1mxfwvepvvm4kmvrtcdvsrtfvv12wtjfswnpwrwmwn1dsrvq1slbwrfuyvfv5c2m4cdzjsdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0xffffffff [0105.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572cda74, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x572cda74, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x573fee39, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195d0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", cAlternateFileName="VV83FA~1.0IL")) returned 0x7d2f58 [0105.165] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572cda74, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x572cda74, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x573fee39, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x195d0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", cAlternateFileName="VV83FA~1.0IL")) returned 0 [0105.165] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.165] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 1 [0105.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJN75pzTm1SRE5WRXpNMlJzWTI0Q2RqRl2OVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjn75pztm1sre5wrxpnmljzwti0q2rqrl2ovejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0xffffffff [0105.167] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56fd2b30, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56fd2b30, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x572a7797, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafe00, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", cAlternateFileName="VV6EA9~1.0IL")) returned 1 [0105.167] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.167] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5lUMVJPTVZ5RmNGS55W1550W5c4U1JFNVdSWHBOTW4K7ldUSTBRM55IVW5SUFZFS55NMjE1TUUw7U1EV58zSEJVVGwyUzE1MXFWVEpVVm4KMVRtcDVSRTFVV12wTjFsWnpWRWMwN1dSRVQ1SlBWRFUyVFV5c2M4cDZjSDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5lumvjptvz5rmngs55w1550w5c4u1jfnvdswhbotw4k7ldustbrm55ivw5sufzfs55nmje1tuuw7u1ev58zsejvvgwyuze1mxfwvepvvm4kmvrtcdvsrtfvv12wtjfswnpwrwmwn1dsrvq1slbwrfuyvfv5c2m4cdzjsdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.167] CloseHandle (hObject=0x1f8) returned 1 [0105.167] CloseHandle (hObject=0xffffffff) returned 1 [0105.167] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5lUMVJPTVZ5RmNGS55W1550W5c4U1JFNVdSWHBOTW4K7ldUSTBRM55IVW5SUFZFS55NMjE1TUUw7U1EV58zSEJVVGwyUzE1MXFWVEpVVm4KMVRtcDVSRTFVV12wTjFsWnpWRWMwN1dSRVQ1SlBWRFUyVFV5c2M4cDZjSDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5lumvjptvz5rmngs55w1550w5c4u1jfnvdswhbotw4k7ldustbrm55ivw5sufzfs55nmje1tuuw7u1ev58zsejvvgwyuze1mxfwvepvvm4kmvrtcdvsrtfvv12wtjfswnpwrwmwn1dsrvq1slbwrfuyvfv5c2m4cdzjsdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0105.168] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5lUMVJPTVZ5RmNGS55W1550W5c4U1JFNVdSWHBOTW4K7ldUSTBRM55IVW5SUFZFS55NMjE1TUUw7U1EV58zSEJVVGwyUzE1MXFWVEpVVm4KMVRtcDVSRTFVV12wTjFsWnpWRWMwN1dSRVQ1SlBWRFUyVFV5c2M4cDZjSDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5lumvjptvz5rmngs55w1550w5c4u1jfnvdswhbotw4k7ldustbrm55ivw5sufzfs55nmje1tuuw7u1ev58zsejvvgwyuze1mxfwvepvvm4kmvrtcdvsrtfvv12wtjfswnpwrwmwn1dsrvq1slbwrfuyvfv5c2m4cdzjsdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0xffffffff [0105.168] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56fd2b30, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56fd2b30, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x572a7797, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafe00, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", cAlternateFileName="VV6EA9~1.0IL")) returned 0x7d2f58 [0105.168] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56fd2b30, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56fd2b30, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x572a7797, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xafe00, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr", cAlternateFileName="VV6EA9~1.0IL")) returned 0 [0105.168] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.168] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 1 [0105.195] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZIT1ROMVdFcFJNVjI4ZG1SRE5WRXpNMlJzWTI0Q2NHUnRPVEJNM215ME0yMDVO3HBUTl2S151qVTJUVlJ1Tmp5RE1UWXpN1lZzVEc07WRET5JPVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzit1romvdfcfjnvji4zg1sre5wrxpnmljzwti0q2nhunrpvejnm215me0ymdvo3hbutl2s151qvtjuvlj1tmp5re1uwxpn1lzzvec07wret5jpvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0xffffffff [0105.195] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5752fee8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5752fee8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x576ad68d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6020, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV7B96~1.0IL")) returned 1 [0105.196] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.196] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRN7lZzTUZ5dE5VcE843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrn7lzztuz5de5vce843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.196] CloseHandle (hObject=0x1f8) returned 1 [0105.196] CloseHandle (hObject=0xffffffff) returned 1 [0105.196] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRN7lZzTUZ5dE5VcE843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrn7lzztuz5de5vce843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0105.196] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRN7lZzTUZ5dE5VcE843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrn7lzztuz5de5vce843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.196] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5752fee8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5752fee8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x576ad68d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6020, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV7B96~1.0IL")) returned 0x7d2b18 [0105.196] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5752fee8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5752fee8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x576ad68d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6020, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV7B96~1.0IL")) returned 0 [0105.196] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0105.197] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0105.198] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4MzVsMFdtNUpO1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4mzvsmfdtnupo1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.198] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577b86fe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x577b86fe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57965b5d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6020, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV0366~1.0IL")) returned 1 [0105.198] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.198] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRWMFU0TUZ5c001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrwmfu0tuz5c001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.198] CloseHandle (hObject=0x1f8) returned 1 [0105.198] CloseHandle (hObject=0xffffffff) returned 1 [0105.199] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRWMFU0TUZ5c001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrwmfu0tuz5c001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0105.199] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRWMFU0TUZ5c001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrwmfu0tuz5c001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.199] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577b86fe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x577b86fe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57965b5d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6020, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV0366~1.0IL")) returned 0x7d2f58 [0105.199] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x577b86fe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x577b86fe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57965b5d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x6020, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV0366~1.0IL")) returned 0 [0105.199] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.199] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0105.200] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4V0U4MFdsM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4v0u4mfdsm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.200] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x576ad68d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x576ad68d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x577b86fe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63e0, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVC053~1.0IL")) returned 1 [0105.201] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.201] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRW3nBTTUZwR001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrw3nbttuzwr001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.201] CloseHandle (hObject=0x1f8) returned 1 [0105.201] CloseHandle (hObject=0xffffffff) returned 1 [0105.201] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRW3nBTTUZwR001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrw3nbttuzwr001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0105.201] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1NzU4c05USlZWRTVYWXpKU1NWWjYzREZWN24Zd1dYcEpNVTQ4TVZWWFZG3zRW3nBTTUZwR001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1nzu4c05uslzwrtvywxpku1nwwjyzrezwn24zd1dycepnvtq4tvzwwfzg3zrw3nbttuzwr001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.201] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x576ad68d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x576ad68d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x577b86fe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVC053~1.0IL")) returned 0x7d2c18 [0105.201] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x576ad68d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x576ad68d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x577b86fe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x63e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVC053~1.0IL")) returned 0 [0105.201] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0105.202] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0105.203] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25Z751sNTJVVE5XYzJSSVZ63DFV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25z751sntjvve5xyzjssvz63dfv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.203] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fee39, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x573fee39, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5752fee8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7470, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVFDD6~1.0IL")) returned 1 [0105.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.203] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1T5ROV1d6RjFSVTA0VlZ5T2RFOVlS15ZXTURSM1ZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1t5rov1d6rjfsvta0vlz5t2rfovls15zxtursm1zfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.203] CloseHandle (hObject=0x1f8) returned 1 [0105.204] CloseHandle (hObject=0xffffffff) returned 1 [0105.204] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1T5ROV1d6RjFSVTA0VlZ5T2RFOVlS15ZXTURSM1ZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1t5rov1d6rjfsvta0vlz5t2rfovls15zxtursm1zfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0 [0105.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pVMjV1T5ROV1d6RjFSVTA0VlZ5T2RFOVlS15ZXTURSM1ZFYzEz3VJFVG5SUFZG3zRWWHBXTUZsNlNUR59OVEZWVjFSW504RjZSVEpONzU1NE0wVTBONTE2VV2wUlZEVTFUR3BDY0ROSFdqWmp17jU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pvmjv1t5rov1d6rjfsvta0vlz5t2rfovls15zxtursm1zfyzez3vjfvg5sufzg3zrwwhbxtuzsnlnur59ovezwvjfsw504rjzsveponzu1ne0wvtbonte2vv2wulzevtfur3bdy0rosfdqwmp17ju1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.211] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fee39, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x573fee39, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5752fee8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7470, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVFDD6~1.0IL")) returned 0x7d3018 [0105.212] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x573fee39, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x573fee39, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5752fee8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x7470, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVFDD6~1.0IL")) returned 0 [0105.212] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0105.212] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 1 [0105.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJU25ZNDNWWnF1RU04VVdOdE9YRjFWMDR3VEc13mRETnRPVFo4VXpWMFl6STFONTFVV1RZM1F6RTJN7554M0U0N516UXpRVDU1TGpCcDNHWjZjZz55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzju25zndnwwnf1ru04vvdode9yrjfwmdr3vec13mretnrpvfo4vxpwmfl6stfontfvv1rzm1f6rtjn7554m0u0n516uxprvdu1tgpccdnhwjzjzz55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.223] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57965b5d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57965b5d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57cad057, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e70, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV362C~1.0IL")) returned 1 [0105.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pW3TA4N24J7U5EW55WV1JYTjFVMGM4RnFS3G96V5ZKM1dYcEo3VE5IVG5CT1ZGS55W3nBXTTUw7U1WW584NTV1V5c1Q1RURTFWWG4VUnpWNlpFU595RTlVV2pGVjdsVXdUVEY1TTA5VE5IYzRW7lJ0TjI1S59TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pw3ta4n24j7u5ew55wv1jytjfvmgm4rnfs3g96v5zkm1dyceo3ve5ivg5ct1zgs55w3nbxttuw7u1ww584ntv1v5c1q1rurtfwwg4vunpwnlpfu595rtlvv2pgvjdsvxduvey1tta5ve5iyzrw7lj0tji1s59tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.224] CloseHandle (hObject=0x1f8) returned 1 [0105.224] CloseHandle (hObject=0xffffffff) returned 1 [0105.224] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pW3TA4N24J7U5EW55WV1JYTjFVMGM4RnFS3G96V5ZKM1dYcEo3VE5IVG5CT1ZGS55W3nBXTTUw7U1WW584NTV1V5c1Q1RURTFWWG4VUnpWNlpFU595RTlVV2pGVjdsVXdUVEY1TTA5VE5IYzRW7lJ0TjI1S59TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pw3ta4n24j7u5ew55wv1jytjfvmgm4rnfs3g96v5zkm1dyceo3ve5ivg5ct1zgs55w3nbxttuw7u1ww584ntv1v5c1q1rurtfwwg4vunpwnlpfu595rtlvv2pgvjdsvxduvey1tta5ve5iyzrw7lj0tji1s59tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0 [0105.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNGW5pW3TA4N24J7U5EW55WV1JYTjFVMGM4RnFS3G96V5ZKM1dYcEo3VE5IVG5CT1ZGS55W3nBXTTUw7U1WW584NTV1V5c1Q1RURTFWWG4VUnpWNlpFU595RTlVV2pGVjdsVXdUVEY1TTA5VE5IYzRW7lJ0TjI1S59TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzngw5pw3ta4n24j7u5ew55wv1jytjfvmgm4rnfs3g96v5zkm1dyceo3ve5ivg5ct1zgs55w3nbxttuw7u1ww584ntv1v5c1q1rurtfwwg4vunpwnlpfu595rtlvv2pgvjdsvxduvey1tta5ve5iyzrw7lj0tji1s59tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.224] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57965b5d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57965b5d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57cad057, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e70, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV362C~1.0IL")) returned 0x7d2a58 [0105.224] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57965b5d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x57965b5d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x57cad057, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x12e70, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV362C~1.0IL")) returned 0 [0105.224] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0105.224] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 1 [0105.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3FZJVm017lIyNDZNVWRXN1U0c1FqRlozVFJ3WXpJ7TNHTnBOVFJNVnpWM50yMVZO155ZVG5CTTE1VXlURzV6ZEROdE9UWjFV7lUwTTF5M09TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3fzjvm017liyndznvwrxn1u0c1fqrlozvfj3wxpj7tnhtnbovfjnvnpwm50ymvzo155zvg5ctte1vxlurzv6zerode9uwjfv7luwttf5m09tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.226] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56184909, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56184909, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56301fe9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV3E3C~1.0IL")) returned 1 [0105.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHNFlWRzF3TVZ5R55UW55NVEpYWTB5TjdWWnFRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhnflwrzf3tvz5r55uw55nvepywtb5tjdwwnfrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.226] CloseHandle (hObject=0x1f8) returned 1 [0105.226] CloseHandle (hObject=0xffffffff) returned 1 [0105.226] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHNFlWRzF3TVZ5R55UW55NVEpYWTB5TjdWWnFRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhnflwrzf3tvz5r55uw55nvepywtb5tjdwwnfrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0105.227] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHNFlWRzF3TVZ5R55UW55NVEpYWTB5TjdWWnFRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhnflwrzf3tvz5r55uw55nvepywtb5tjdwwnfrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.227] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56184909, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56184909, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56301fe9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV3E3C~1.0IL")) returned 0x7d2b58 [0105.227] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56184909, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56184909, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56301fe9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV3E3C~1.0IL")) returned 0 [0105.227] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0105.227] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0105.227] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0dN7VZqQ50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0dn7vzqq50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.228] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55fe0f77, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55fe0f77, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56184909, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe740, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVB429~1.0IL")) returned 1 [0105.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.228] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHNFlWRzF3TVZ5R55UW55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhnflwrzf3tvz5r55uw55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0105.228] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe740 [0105.228] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0105.229] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0105.333] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xe740, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xe740, lpOverlapped=0x0) returned 1 [0105.334] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xe750, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xe750, lpOverlapped=0x0) returned 1 [0105.336] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0105.363] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0105.374] CloseHandle (hObject=0x1f8) returned 1 [0105.374] CloseHandle (hObject=0x1fc) returned 1 [0105.376] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHNFlWRzF3TVZ5R55UW55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhnflwrzf3tvz5r55uw55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0105.377] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHNFlWRzF3TVZ5R55UW55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhnflwrzf3tvz5r55uw55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0105.377] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55fe0f77, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55fe0f77, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56184909, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe740, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVB429~1.0IL")) returned 0x7d2fd8 [0105.377] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55fe0f77, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x55fe0f77, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56184909, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xe740, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVB429~1.0IL")) returned 0 [0105.377] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0105.377] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0105.379] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G4YVG1wMVdFNTZNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g4yvg1wmvdfntznmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0105.379] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56301fe9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56301fe9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5640d088, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1840, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVFC6D~1.0IL")) returned 1 [0105.379] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0105.379] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHOTZVMjV1NzUwNGNIT55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhotzvmjv1nzuwngnit55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.379] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1840 [0105.379] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0105.380] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0105.456] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1840, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1840, lpOverlapped=0x0) returned 1 [0105.457] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1850, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1850, lpOverlapped=0x0) returned 1 [0105.458] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0105.535] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0105.546] CloseHandle (hObject=0x1fc) returned 1 [0105.546] CloseHandle (hObject=0x1f8) returned 1 [0105.547] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHOTZVMjV1NzUwNGNIT55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhotzvmjv1nzuwngnit55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0105.549] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNHOTZVMjV1NzUwNGNIT55NVEpYWTBVMGRFMV5z7lJWN24Fd1ZHMDFNVE5FVG5CTlZFWnFOMVJWTUUwNFpETlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznhotzvmjv1nzuwngnit55nvepywtbvmgrfmv5z7ljwn24fd1zhmdfnve5fvg5ctlzfwnfomvjwtuuwnfpetlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0105.550] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56301fe9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56301fe9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5640d088, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1840, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVFC6D~1.0IL")) returned 0x7d2d58 [0105.550] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56301fe9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56301fe9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5640d088, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1840, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVFC6D~1.0IL")) returned 0 [0105.550] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0105.550] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0105.551] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3G96U25Z7504cHNNMTJXY0U0dE1Y3zRV7lEwVG01MTNETnBNVEZqN1RVME04ZDNPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3g96u25z7504chnnmtjxy0u0de1y3zrv7lewvg01mtnetnbnvezqn1rvme04zdnpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0105.551] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5640d088, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5640d088, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56649429, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2680, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV0870~1.0IL")) returned 1 [0105.551] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.552] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNIQ5lWRzB3N245R1d6ZFVS75EwTjJwR1ZFNUVVNTg0V5Z17lRUSTFORTFYVGpWT1ZGRjZW155qTlU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzniq5lwrzb3n245r1d6zfvs75ewtjjwr1zfnuvvntg0v5z17lrustfortfyvgpwt1zgrjzw155qtlu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0105.552] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2680 [0105.552] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0105.552] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0105.670] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2680, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2680, lpOverlapped=0x0) returned 1 [0105.671] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2690, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2690, lpOverlapped=0x0) returned 1 [0105.672] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0105.709] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0105.723] CloseHandle (hObject=0x1f8) returned 1 [0105.724] CloseHandle (hObject=0x1fc) returned 1 [0105.724] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNIQ5lWRzB3N245R1d6ZFVS75EwTjJwR1ZFNUVVNTg0V5Z17lRUSTFORTFYVGpWT1ZGRjZW155qTlU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzniq5lwrzb3n245r1d6zfvs75ewtjjwr1zfnuvvntg0v5z17lrustfortfyvgpwt1zgrjzw155qtlu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0 [0105.724] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNIQ5lWRzB3N245R1d6ZFVS75EwTjJwR1ZFNUVVNTg0V5Z17lRUSTFORTFYVGpWT1ZGRjZW155qTlU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzniq5lwrzb3n245r1d6zfvs75ewtjjwr1zfnuvvntg0v5z17lrustfortfyvgpwt1zgrjzw155qtlu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0x20 [0105.724] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5640d088, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5640d088, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56649429, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2680, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV0870~1.0IL")) returned 0x7d2f58 [0105.725] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5640d088, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5640d088, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x56649429, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2680, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VV0870~1.0IL")) returned 0 [0105.725] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.725] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 1 [0105.726] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBIVG0w7ldGWndURzA0N2pGVE5EU584VFZzTTI1NE1XTjVOVFF6VjNjNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbivg0w7ldgwndurza0n2pgve5eu584vfzztti1ne1xtjvovff6vjnjnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.726] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56649429, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56649429, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5683b737, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2DA1~1.0IL")) returned 1 [0105.726] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0105.726] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNIQlpUVzF3TVZ1NlVqQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzniqlpuvzf3tvz1nlvqqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.727] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8fa0 [0105.727] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0105.727] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0105.808] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8fa0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8fa0, lpOverlapped=0x0) returned 1 [0105.809] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8fb0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8fb0, lpOverlapped=0x0) returned 1 [0105.811] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0105.838] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0105.850] CloseHandle (hObject=0x1fc) returned 1 [0105.850] CloseHandle (hObject=0x1f8) returned 1 [0105.851] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNIQlpUVzF3TVZ1NlVqQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzniqlpuvzf3tvz1nlvqqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0105.852] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNIQlpUVzF3TVZ1NlVqQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktzniqlpuvzf3tvz1nlvqqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0105.852] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56649429, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56649429, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5683b737, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2DA1~1.0IL")) returned 0x7d3098 [0105.852] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56649429, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x56649429, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5683b737, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x8fa0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV2DA1~1.0IL")) returned 0 [0105.852] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0105.852] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0105.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3HBZTW1wMVZ6UjB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3hbztw1wmvz6ujb1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0105.854] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580ff6d8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x580ff6d8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x585053b9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2820, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV3BCA~1.0IL")) returned 1 [0105.854] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.854] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVMTVUV3BLMWpOV1dURlVSRlU4TTF1d2RET52jREZWN24Vd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvmtvuv3blmwpov1durlvsrlu4ttf1d2ret52jrezwn24vd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.854] CloseHandle (hObject=0x1f8) returned 1 [0105.854] CloseHandle (hObject=0xffffffff) returned 1 [0105.854] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVMTVUV3BLMWpOV1dURlVSRlU4TTF1d2RET52jREZWN24Vd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvmtvuv3blmwpov1durlvsrlu4ttf1d2ret52jrezwn24vd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0 [0105.855] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVMTVUV3BLMWpOV1dURlVSRlU4TTF1d2RET52jREZWN24Vd1ZFWmpNV1J4VG5SV1ZG3DZWMFU4ZDFSSGNFW55OVFEyV2pOUjdqTlVOVEpYM0UwNFQ1U59XR1I2TlR1TlIyNHpX3TV3N1M0dzFXNG033555LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvmtvuv3blmwpov1durlvsrlu4ttf1d2ret52jrezwn24vd1zfwmpnv1j4vg5sv1zg3dzwmfu4zdfssgnfw55ovfeyv2poujdqtlvovepym0uwnfq1u59xr1i2tlr1tliynhpx3tv3n1m0dzfxng033555ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.855] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580ff6d8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x580ff6d8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x585053b9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2820, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV3BCA~1.0IL")) returned 0x7d2a18 [0105.855] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x580ff6d8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x580ff6d8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x585053b9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xb2820, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr", cAlternateFileName="VV3BCA~1.0IL")) returned 0 [0105.855] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0105.855] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 1 [0105.878] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U15TWpK1jNWWTFURFU1M1ZwdDNHcDFV7lUwVEZjMWRqTnRWVFl6V0U1d1RHcEZNNTQ2WjNR7jNUNTJX3E04T5ROWGR6NTZNR24zWm5w7S4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u15twpk1jnwwtfurfu1m1zwddnhcdfv7luwvezjmwrqtnrwvfl6v0u1d1rhceznntq2wjnr7jnuntjx3e04t5rowgr6ntznr24zwm5w7s4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.879] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586365e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x586365e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5895a054, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68d0, dwReserved0=0x7e5360, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVBE13~1.0IL")) returned 1 [0105.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUlUMVJPTVZ5RmNET543NXB6VG04U1NFMVVSVFJWN24Zd1dYcEpNVTQ4TVZWWFZG3zRW3nBTTUZwR001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnulumvjptvz5rmnet543nxb6vg04u1nfmvvsvfjwn24zd1dycepnvtq4tvzwwfzg3zrw3nbttuzwr001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0105.879] CloseHandle (hObject=0x1f8) returned 1 [0105.880] CloseHandle (hObject=0xffffffff) returned 1 [0105.880] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUlUMVJPTVZ5RmNET543NXB6VG04U1NFMVVSVFJWN24Zd1dYcEpNVTQ4TVZWWFZG3zRW3nBTTUZwR001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnulumvjptvz5rmnet543nxb6vg04u1nfmvvsvfjwn24zd1dycepnvtq4tvzwwfzg3zrw3nbttuzwr001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0105.880] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUlUMVJPTVZ5RmNET543NXB6VG04U1NFMVVSVFJWN24Zd1dYcEpNVTQ4TVZWWFZG3zRW3nBTTUZwR001NU843VJJVFYyT541MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnulumvjptvz5rmnet543nxb6vg04u1nfmvvsvfjwn24zd1dycepnvtq4tvzwwfzg3zrw3nbttuzwr001nu843vjjvfyyt541mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0105.880] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586365e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x586365e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5895a054, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68d0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVBE13~1.0IL")) returned 0x7d2f58 [0105.880] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x586365e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x586365e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5895a054, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x68d0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VVBE13~1.0IL")) returned 0 [0105.880] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0105.881] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0105.882] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5IT1ROMVdFcDNN75pzTm1SSE1URTRV7lYwWXpJMU41MVVXVFo4VnpSMFpGM55O1mRITV2NN51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5it1romvdfcdnn75pztm1sse1urtrv7lywwxpjmu41mvvxvfo4vnpsmfpgm55o1mritv2nn51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0105.882] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b6db00, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58b6db00, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58cf0016, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV6D2D~1.0IL")) returned 1 [0105.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0105.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpVMjV1NzU4c2NIZE5N15Z4VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupvmjv1nzu4c2nize5n15z4vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0105.883] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x820 [0105.883] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0105.884] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0105.990] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x820, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x820, lpOverlapped=0x0) returned 1 [0105.992] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x830, lpOverlapped=0x0) returned 1 [0105.993] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0106.024] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0106.035] CloseHandle (hObject=0x1f8) returned 1 [0106.035] CloseHandle (hObject=0x1fc) returned 1 [0106.036] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpVMjV1NzU4c2NIZE5N15Z4VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupvmjv1nzu4c2nize5n15z4vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0106.037] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpVMjV1NzU4c2NIZE5N15Z4VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupvmjv1nzu4c2nize5n15z4vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0106.037] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b6db00, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58b6db00, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58cf0016, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV6D2D~1.0IL")) returned 0x7d2c98 [0106.037] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b6db00, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58b6db00, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58cf0016, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV6D2D~1.0IL")) returned 0 [0106.037] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0106.037] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0106.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25Z751scHdNMjFqTmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25z751schdnmjfqtmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0106.039] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5897db40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5897db40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58b6db00, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80d0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV511C~1.0IL")) returned 1 [0106.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0106.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpVMjV1T5ROV1d6RjFSV00wVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupvmjv1t5rov1d6rjfsv00wvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0106.039] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80d0 [0106.039] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0106.040] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0106.113] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x80d0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x80d0, lpOverlapped=0x0) returned 1 [0106.114] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x80e0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x80e0, lpOverlapped=0x0) returned 1 [0106.115] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0106.139] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0106.152] CloseHandle (hObject=0x1fc) returned 1 [0106.153] CloseHandle (hObject=0x1f8) returned 1 [0106.154] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpVMjV1T5ROV1d6RjFSV00wVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupvmjv1t5rov1d6rjfsv00wvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0106.155] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpVMjV1T5ROV1d6RjFSV00wVFZSR1ZFNVlV3XBOMW4V7VZGWlNXNTVzY0YyT1NGSTFWMFV3TTU0d1l6Umo3VFIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupvmjv1t5rov1d6rjfsv00wvfzsr1zfnvlv3xbomw4v7vzgwlnxntvzy0yyt1ngstfwmfv3ttu0d1l6umo3vfiztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0106.155] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5897db40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5897db40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58b6db00, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80d0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV511C~1.0IL")) returned 0x7d3098 [0106.155] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5897db40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5897db40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58b6db00, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x80d0, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VV511C~1.0IL")) returned 0 [0106.155] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0106.155] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0106.157] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JU25ZNDNWWnF1RWM0TVRGVE5YUmpN1lUyVFZSW55scF2OSFI1V0UwM54wYzRj7TR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5ju25zndnwwnf1rwm0tvrgve5yumpn1luyvfzsw55scf2osfi1v0uwm54wyzrj7tr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0106.157] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58d1130c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58d1130c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58e1c361, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2121~1.0IL")) returned 1 [0106.168] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0106.169] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpW3TA4N24J7U5EW55WV1JYTjFST1dWWjZRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupw3ta4n24j7u5ew55wv1jytjfst1dwwjzrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0106.169] CloseHandle (hObject=0x1f8) returned 1 [0106.169] CloseHandle (hObject=0xffffffff) returned 1 [0106.169] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpW3TA4N24J7U5EW55WV1JYTjFST1dWWjZRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupw3ta4n24j7u5ew55wv1jytjfst1dwwjzrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0 [0106.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNVNUpW3TA4N24J7U5EW55WV1JYTjFST1dWWjZRNTB6V5VZMlRWW55NRTVGTl2CT1YzZDZNVlJGT5Y1755UR59SRTVZW52vMU41MUgzSE44M25CNU4qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznvnupw3ta4n24j7u5ew55wv1jytjfst1dwwjzrntb6v5vzmlrww55nrtvgtl2ct1yzzdznvljgt5y1755ur59srtvzw52vmu41mugzse44m25cnu4qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0106.169] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58d1130c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58d1130c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58e1c361, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2121~1.0IL")) returned 0x7d2b98 [0106.169] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58d1130c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58d1130c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58e1c361, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x3760, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr", cAlternateFileName="VV2121~1.0IL")) returned 0 [0106.169] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0106.170] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 1 [0106.172] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3U5JVm017lIyNDZNVWRXN1ROWVZ6Q50zVEY2TVZNME5FNXBOV3d6MVRFNF5zNTFORE5YZHo1N51H3HN13nB5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3u5jvm017liyndznvwrxn1rowvz6q50zvey2tvznme5fnxbov3d6mvrfnf5zntfore5yzho1n51h3hn13nb5ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0106.172] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e1c361, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58e1c361, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58fbfd43, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13130, dwReserved0=0x7c49b8, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VVD07B~1.0IL")) returned 1 [0106.172] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0106.172] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNWRjVUMTJzTVZKNlJUU55WNTA0W5V5TjdVNVVXNTVXUmpV7VYyNGpNR1JIVW4sVVZGNXpV3nBHNzU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznwrjvumtjztvzknljuu55wnta0w5v5tjdvnvvxntvxumpv7vyyngpnr1jivw4svvzgnxpv3nbhnzu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0106.173] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13130 [0106.173] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0106.174] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0106.253] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x13130, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x13130, lpOverlapped=0x0) returned 1 [0106.253] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x13140, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x13140, lpOverlapped=0x0) returned 1 [0106.255] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0106.325] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0106.336] CloseHandle (hObject=0x1f8) returned 1 [0106.337] CloseHandle (hObject=0x1fc) returned 1 [0106.339] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNWRjVUMTJzTVZKNlJUU55WNTA0W5V5TjdVNVVXNTVXUmpV7VYyNGpNR1JIVW4sVVZGNXpV3nBHNzU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznwrjvumtjztvzknljuu55wnta0w5v5tjdvnvvxntvxumpv7vyyngpnr1jivw4svvzgnxpv3nbhnzu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0 [0106.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNWRjVUMTJzTVZKNlJUU55WNTA0W5V5TjdVNVVXNTVXUmpV7VYyNGpNR1JIVW4sVVZGNXpV3nBHNzU0cVF6QXpSMW8yWTJjNU9TNHc4VzRtN25JOS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznwrjvumtjztvzknljuu55wnta0w5v5tjdvnvvxntvxumpv7vyyngpnr1jivw4svvzgnxpv3nbhnzu0cvf6qxpsmw8ywtjjnu9tnhc4vzrtn25jos4w1w4m7ni9.0ilfzr")) returned 0x20 [0106.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e1c361, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58e1c361, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58fbfd43, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13130, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VVD07B~1.0IL")) returned 0x7d2d58 [0106.340] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58e1c361, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58e1c361, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x58fbfd43, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x13130, dwReserved0=0x0, dwReserved1=0x7c5e18, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr", cAlternateFileName="VVD07B~1.0IL")) returned 0 [0106.340] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0106.340] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 1 [0106.342] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VF5T12sMVJ6RTRNV504ZEdN7U5UW55WRjUyV24jMGRHUllUVF5zUnpG754qQnAzR1o2Y2c5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vf5t12smvj6rtrnv504zedn7u5uw55wrjuyv24jmgrhulluvf5zunpg754qqnazr1o2y2c5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0106.342] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fbfd43, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58fbfd43, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5918b15d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0ce0, dwReserved0=0x7cad68, dwReserved1=0x0, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVC6AF~1.0IL")) returned 1 [0106.342] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0106.342] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNWSjBNMDJ2T5Z1NjNEQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznwsjbnmdj2t5z1njneqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0106.342] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0ce0 [0106.342] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0106.343] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0106.412] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xf0ce0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xf0ce0, lpOverlapped=0x0) returned 1 [0106.423] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xf0cf0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xf0cf0, lpOverlapped=0x0) returned 1 [0106.439] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0106.469] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0106.480] CloseHandle (hObject=0x1fc) returned 1 [0106.480] CloseHandle (hObject=0x1f8) returned 1 [0106.542] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNWSjBNMDJ2T5Z1NjNEQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznwsjbnmdj2t5z1njneqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0106.543] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlYyd1M4VTRV3DJTMWw1MFZqRndjMWw2VG4KTzNWSjBNMDJ2T5Z1NjNEQjFS3U00VG1wT1dWUjZRNTA0TlZWNVZFYzRWMDQ4T5ZsVzN6Q55NMnBLTUUwd1JUVlBV7lIzTVZjMDNUZDZTVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlyyd1m4vtrv3djtmww1mfzqrndjmww2vg4ktznwsjbnmdj2t5z1njneqjfs3u00vg1wt1dwujzrnta0tlzwnvzfyzrwmdq4t5zsvzn6q55nmnbltuuwd1juvlbv7liztvzjmdnuzdztvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0106.543] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fbfd43, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58fbfd43, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5918b15d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0ce0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVC6AF~1.0IL")) returned 0x7d2fd8 [0106.543] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58fbfd43, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x58fbfd43, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x5918b15d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0xf0ce0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr", cAlternateFileName="VVC6AF~1.0IL")) returned 0 [0106.543] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0106.544] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 1 [0106.554] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VV2wS1U4Ul2S1l50VjFwc1l6TlJO3VJ0M02vNFZ63DB1RmM4TmpOWVR6Q504NVV5VEc4V041NFlW3nBNM2pKME0wRTVPUzR3MVc03Td6ST56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vv2ws1u4ul2s1l50vjfwc1l6tljo3vj0m02vnfz63db1rmm4tmpowvr6q504nvv5vec4v041nflw3nbnm2pkme0wrtvpuzr3mvc03td6st56mglsznpy.0ilfzr")) returned 0xffffffff [0106.554] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5454cfab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5454cfab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x546ee8f9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e50, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VVZ5CZ~1.0IL")) returned 1 [0106.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0106.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlZ1NWN6ZFdWWHBSMTVwMVRXNFZN3FZzTW4OT51EUjBUVlJKN24wN55UV504NUp3TTB5MU5tTm5PVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlz1nwn6zfdwwhbsmtvwmvrxnfzn3fzztw4ot51eujbuvljkn24wn55uv504nup3ttb5mu5ttm5pvdu2tudsc1p6ch56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0106.554] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x44e50 [0106.554] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0106.555] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0106.639] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x44e50, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x44e50, lpOverlapped=0x0) returned 1 [0106.645] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x44e60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x44e60, lpOverlapped=0x0) returned 1 [0106.650] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0106.676] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0106.688] CloseHandle (hObject=0x1f8) returned 1 [0106.688] CloseHandle (hObject=0x1fc) returned 1 [0106.694] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlZ1NWN6ZFdWWHBSMTVwMVRXNFZN3FZzTW4OT51EUjBUVlJKN24wN55UV504NUp3TTB5MU5tTm5PVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlz1nwn6zfdwwhbsmtvwmvrxnfzn3fzztw4ot51eujbuvljkn24wn55uv504nup3ttb5mu5ttm5pvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0 [0106.694] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VlZ1NWN6ZFdWWHBSMTVwMVRXNFZN3FZzTW4OT51EUjBUVlJKN24wN55UV504NUp3TTB5MU5tTm5PVDU2TUdsc1p6cH56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vlz1nwn6zfdwwhbsmtvwmvrxnfzn3fzztw4ot51eujbuvljkn24wn55uv504nup3ttb5mu5ttm5pvdu2tudsc1p6ch56mglsznpy.0ilfzr")) returned 0x20 [0106.695] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5454cfab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5454cfab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x546ee8f9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e50, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VVZ5CZ~1.0IL")) returned 0x7d2c98 [0106.695] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5454cfab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x5454cfab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x546ee8f9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x44e50, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr", cAlternateFileName="VVZ5CZ~1.0IL")) returned 0 [0106.695] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0106.695] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 1 [0106.698] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\VVZ5czdWVXpR15p1TW4VMlVsMlNNMDR0TVRJ7lp6NTVM15JwM0d1NmNnOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\vvz5czdwvxpr15p1tw4vmlvsmlnnmdr0tvrj7lp6ntvm15jwm0d1nmnnot56mglsznpy.0ilfzr")) returned 0xffffffff [0106.698] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1 [0106.698] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0106.699] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\d29yZEV0dy5tYW49.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\d29yzev0dy5tyw49.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0106.700] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9bddd [0106.700] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0106.700] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0106.783] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x9bddd, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x9bddd, lpOverlapped=0x0) returned 1 [0106.797] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x9bde0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x9bde0, lpOverlapped=0x0) returned 1 [0106.810] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0106.833] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0106.844] CloseHandle (hObject=0x1fc) returned 1 [0106.845] CloseHandle (hObject=0x1f8) returned 1 [0106.864] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\d29yZEV0dy5tYW49.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\d29yzev0dy5tyw49.0ilfzr")) returned 0 [0106.864] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\d29yZEV0dy5tYW49.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\d29yzev0dy5tyw49.0ilfzr")) returned 0x20 [0106.864] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="wordEtw.man", cAlternateFileName="")) returned 0x7d2fd8 [0106.865] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="wordEtw.man", cAlternateFileName="")) returned 0 [0106.865] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0106.865] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man")) returned 1 [0106.871] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man")) returned 0xffffffff [0106.871] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 0 [0106.871] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0106.871] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30333738, dwReserved1=0x32392d32, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0106.871] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0106.871] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x45383043, dwReserved1=0x322d3939, cFileName="Crypto", cAlternateFileName="")) returned 1 [0106.871] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77744564, dwReserved1=0x6e616d2e, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0106.872] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77744564, dwReserved1=0x6e616d2e, cFileName="..", cAlternateFileName="")) returned 1 [0106.872] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x77744564, dwReserved1=0x6e616d2e, cFileName="DSS", cAlternateFileName="")) returned 1 [0106.872] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2d18 [0106.872] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.873] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0106.873] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2ad8 [0106.874] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0106.874] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 0 [0106.874] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0106.874] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0106.874] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0106.874] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656e6968, dwReserved1=0x7379654b, cFileName="Keys", cAlternateFileName="")) returned 1 [0106.874] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0106.875] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.875] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0106.875] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0106.875] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656e6968, dwReserved1=0x7379654b, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0106.875] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2d58 [0106.876] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.876] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0106.876] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\WindowsAIK\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0106.876] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName="..", cAlternateFileName="")) returned 1 [0106.876] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName="..", cAlternateFileName="")) returned 0 [0106.876] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0106.876] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0106.877] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0106.877] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73776f64, dwReserved1=0x734b4941, cFileName="RSA", cAlternateFileName="")) returned 1 [0106.877] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2b58 [0106.877] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.877] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0106.877] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName=".", cAlternateFileName="")) returned 0x7d2b18 [0106.878] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName="..", cAlternateFileName="")) returned 1 [0106.878] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0106.878] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0xfffffffe, dwReserved1=0x19ecc0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 0 [0106.878] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0106.878] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63616136, dwReserved1=0x34393665, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0106.878] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320034, dwReserved1=0x620066, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0106.878] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x320034, dwReserved1=0x620066, cFileName="..", cAlternateFileName="")) returned 1 [0106.878] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x320034, dwReserved1=0x620066, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x320034, dwReserved1=0x620066, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 0 [0106.879] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x63616136, dwReserved1=0x34393665, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0106.879] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x312d352d, dwReserved1=0x73796538, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0106.879] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30316463, dwReserved1=0x39366636, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0106.879] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x30316463, dwReserved1=0x39366636, cFileName="..", cAlternateFileName="")) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x30316463, dwReserved1=0x39366636, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x390065, dwReserved1=0x330061, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x390065, dwReserved1=0x330061, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 0 [0106.879] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x312d352d, dwReserved1=0x73796538, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0106.879] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0106.879] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4b6d6574, dwReserved1=0x32737965, cFileName="DataMart", cAlternateFileName="")) returned 1 [0106.879] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0106.880] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName="..", cAlternateFileName="")) returned 1 [0106.880] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0106.880] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640063, dwReserved1=0x630064, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0106.880] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640063, dwReserved1=0x630064, cFileName="..", cAlternateFileName="")) returned 1 [0106.880] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640063, dwReserved1=0x630064, cFileName="..", cAlternateFileName="")) returned 0 [0106.880] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0106.881] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0106.881] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0106.881] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x46695764, dwReserved1=0x32737969, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0106.881] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName=".", cAlternateFileName="")) returned 0x7d2d18 [0106.881] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName="..", cAlternateFileName="")) returned 1 [0106.881] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x37653964, dwReserved1=0x63643164, cFileName="Device", cAlternateFileName="")) returned 1 [0106.881] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640063, dwReserved1=0x630064, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0106.882] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640063, dwReserved1=0x630064, cFileName="..", cAlternateFileName="")) returned 1 [0106.882] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x640063, dwReserved1=0x630064, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0106.882] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2d58 [0106.884] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0106.884] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="background.png", cAlternateFileName="")) returned 1 [0106.884] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0106.886] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\YmFj12dy33V6ZC5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ymfj12dy33v6zc5w3mc9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0106.886] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1fad1 [0106.886] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0106.886] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0107.008] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1fad1, lpOverlapped=0x0) returned 1 [0107.012] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1fae0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1fae0, lpOverlapped=0x0) returned 1 [0107.016] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0107.040] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0107.051] CloseHandle (hObject=0x1fc) returned 1 [0107.052] CloseHandle (hObject=0x204) returned 1 [0107.057] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\YmFj12dy33V6ZC5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ymfj12dy33v6zc5w3mc9.0ilfzr")) returned 0 [0107.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\YmFj12dy33V6ZC5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ymfj12dy33v6zc5w3mc9.0ilfzr")) returned 0x20 [0107.057] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="background.png", cAlternateFileName="")) returned 0x7d29d8 [0107.058] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="background.png", cAlternateFileName="")) returned 0 [0107.058] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0107.058] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0 [0107.058] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png")) returned 0x20 [0107.058] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0107.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0107.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\YmVoYXZp33I67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ymvoyxzp33i67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0107.059] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb61 [0107.059] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0107.059] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0107.206] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0xb61, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xb61, lpOverlapped=0x0) returned 1 [0107.208] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xb70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xb70, lpOverlapped=0x0) returned 1 [0107.209] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0107.275] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0107.289] CloseHandle (hObject=0x204) returned 1 [0107.289] CloseHandle (hObject=0x1fc) returned 1 [0107.292] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\YmVoYXZp33I67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ymvoyxzp33i67g1s.0ilfzr")) returned 0 [0107.292] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\YmVoYXZp33I67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ymvoyxzp33i67g1s.0ilfzr")) returned 0x20 [0107.292] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="behavior.xml", cAlternateFileName="")) returned 0x7d2fd8 [0107.292] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="behavior.xml", cAlternateFileName="")) returned 0 [0107.293] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0107.293] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0 [0107.293] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml")) returned 0x20 [0107.293] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0107.293] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0107.295] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ZGV21WNlLnB6Zw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\zgv21wnllnb6zw99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0107.296] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xadc8 [0107.296] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0107.296] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0107.371] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xadc8, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xadc8, lpOverlapped=0x0) returned 1 [0107.434] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xadd0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xadd0, lpOverlapped=0x0) returned 1 [0107.435] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0107.495] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0107.560] CloseHandle (hObject=0x1fc) returned 1 [0107.560] CloseHandle (hObject=0x204) returned 1 [0107.562] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ZGV21WNlLnB6Zw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\zgv21wnllnb6zw99.0ilfzr")) returned 0 [0107.563] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\ZGV21WNlLnB6Zw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\zgv21wnllnb6zw99.0ilfzr")) returned 0x20 [0107.563] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="device.png", cAlternateFileName="")) returned 0x7d2b98 [0107.563] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="device.png", cAlternateFileName="")) returned 0 [0107.563] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0107.563] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0 [0107.563] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png")) returned 0x20 [0107.563] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0107.563] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0107.565] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\33Zlcm427S5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\33zlcm427s5w3mc9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0107.566] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x70c1 [0107.566] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0107.566] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0107.735] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x70c1, lpOverlapped=0x0) returned 1 [0107.737] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70d0, lpOverlapped=0x0) returned 1 [0107.739] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0107.762] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0107.774] CloseHandle (hObject=0x204) returned 1 [0107.774] CloseHandle (hObject=0x1fc) returned 1 [0107.775] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\33Zlcm427S5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\33zlcm427s5w3mc9.0ilfzr")) returned 0 [0107.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\33Zlcm427S5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\33zlcm427s5w3mc9.0ilfzr")) returned 0x20 [0107.776] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="overlay.png", cAlternateFileName="")) returned 0x7d2b58 [0107.776] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="overlay.png", cAlternateFileName="")) returned 0 [0107.776] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0107.776] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0 [0107.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png")) returned 0x20 [0107.776] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0107.777] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0107.843] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\c3VwZXJiYXI6cG5n.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\c3vwzxjiyxi6cg5n.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0107.844] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x99d3 [0107.844] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0107.844] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0107.960] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x99d3, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x99d3, lpOverlapped=0x0) returned 1 [0107.965] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x99e0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x99e0, lpOverlapped=0x0) returned 1 [0108.016] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0108.039] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.050] CloseHandle (hObject=0x1fc) returned 1 [0108.051] CloseHandle (hObject=0x204) returned 1 [0108.053] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\c3VwZXJiYXI6cG5n.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\c3vwzxjiyxi6cg5n.0ilfzr")) returned 0 [0108.053] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\c3VwZXJiYXI6cG5n.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\c3vwzxjiyxi6cg5n.0ilfzr")) returned 0x20 [0108.053] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="superbar.png", cAlternateFileName="")) returned 0x7d2b58 [0108.053] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0108.053] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0108.054] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0 [0108.054] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png")) returned 0x20 [0108.054] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0108.054] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0108.054] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61627265, dwReserved1=0x6e702e72, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0108.054] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2d58 [0108.054] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.054] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0108.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0108.095] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\YmFj12dy33V6ZC5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ymfj12dy33v6zc5w3mc9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0108.097] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1fad1 [0108.097] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0108.097] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0108.246] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1fad1, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1fad1, lpOverlapped=0x0) returned 1 [0108.267] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1fae0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1fae0, lpOverlapped=0x0) returned 1 [0108.270] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0108.292] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.303] CloseHandle (hObject=0x204) returned 1 [0108.304] CloseHandle (hObject=0x1fc) returned 1 [0108.307] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\YmFj12dy33V6ZC5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ymfj12dy33v6zc5w3mc9.0ilfzr")) returned 0 [0108.307] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\YmFj12dy33V6ZC5w3mc9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ymfj12dy33v6zc5w3mc9.0ilfzr")) returned 0x20 [0108.307] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="background.png", cAlternateFileName="")) returned 0x7d2a98 [0108.308] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="background.png", cAlternateFileName="")) returned 0 [0108.308] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0108.308] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0 [0108.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png")) returned 0x20 [0108.308] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0108.308] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0108.308] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\YmVoYXZp33I67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ymvoyxzp33i67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0108.309] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6cf [0108.309] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0108.309] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0108.522] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x6cf, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x6cf, lpOverlapped=0x0) returned 1 [0108.524] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x6e0, lpOverlapped=0x0) returned 1 [0108.525] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0108.705] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.716] CloseHandle (hObject=0x1fc) returned 1 [0108.716] CloseHandle (hObject=0x204) returned 1 [0108.717] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\YmVoYXZp33I67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ymvoyxzp33i67g1s.0ilfzr")) returned 0 [0108.718] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\YmVoYXZp33I67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\ymvoyxzp33i67g1s.0ilfzr")) returned 0x20 [0108.718] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="behavior.xml", cAlternateFileName="")) returned 0x7d3098 [0108.718] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="behavior.xml", cAlternateFileName="")) returned 0 [0108.718] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0108.718] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0 [0108.718] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml")) returned 0x20 [0108.718] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0108.719] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0108.719] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\d2F0ZXJtYXJrLnB6Zw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\d2f0zxjtyxjrlnb6zw99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0108.719] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x70c1 [0108.719] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0108.720] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0108.910] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x70c1, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x70c1, lpOverlapped=0x0) returned 1 [0108.912] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x70d0, lpOverlapped=0x0) returned 1 [0108.913] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0108.939] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0108.951] CloseHandle (hObject=0x204) returned 1 [0108.951] CloseHandle (hObject=0x1fc) returned 1 [0109.027] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\d2F0ZXJtYXJrLnB6Zw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\d2f0zxjtyxjrlnb6zw99.0ilfzr")) returned 0 [0109.028] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\d2F0ZXJtYXJrLnB6Zw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\d2f0zxjtyxjrlnb6zw99.0ilfzr")) returned 0x20 [0109.028] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="watermark.png", cAlternateFileName="")) returned 0x7d29d8 [0109.028] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0109.028] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0109.028] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0 [0109.028] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png")) returned 0x20 [0109.029] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0109.029] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0109.029] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x61627265, dwReserved1=0x6e702e72, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0109.029] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0109.029] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38643230, dwReserved1=0x352d3731, cFileName="Task", cAlternateFileName="")) returned 1 [0109.029] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x616d7265, dwReserved1=0x702e6b72, cFileName=".", cAlternateFileName="")) returned 0x7d2c58 [0109.029] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x616d7265, dwReserved1=0x702e6b72, cFileName="..", cAlternateFileName="")) returned 1 [0109.030] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x616d7265, dwReserved1=0x702e6b72, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0109.030] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2d58 [0109.032] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.032] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0109.032] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0109.033] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="..", cAlternateFileName="")) returned 1 [0109.033] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0109.033] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0109.036] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\cmvz33vyy2u67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0109.036] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x536 [0109.037] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0109.037] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0109.176] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x536, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x536, lpOverlapped=0x0) returned 1 [0109.178] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x540, lpOverlapped=0x0) returned 1 [0109.179] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0109.203] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.214] CloseHandle (hObject=0x204) returned 1 [0109.214] CloseHandle (hObject=0x208) returned 1 [0109.215] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\cmvz33vyy2u67g1s.0ilfzr")) returned 0 [0109.215] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\cmvz33vyy2u67g1s.0ilfzr")) returned 0x20 [0109.216] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x7c, cFileName="resource.xml", cAlternateFileName="")) returned 0x7d2998 [0109.216] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x7c, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0109.216] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0109.216] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0 [0109.216] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml")) returned 0x20 [0109.216] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x2000002, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0109.216] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0109.216] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6372756f, dwReserved1=0x6d782e65, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0109.217] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0109.221] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Zm9sZGVyLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\zm9szgvylmlj3w99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0109.222] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd0a3 [0109.222] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0109.222] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0109.386] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xd0a3, lpOverlapped=0x0) returned 1 [0109.389] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd0b0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xd0b0, lpOverlapped=0x0) returned 1 [0109.391] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0109.472] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.492] CloseHandle (hObject=0x1fc) returned 1 [0109.492] CloseHandle (hObject=0x208) returned 1 [0109.494] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Zm9sZGVyLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\zm9szgvylmlj3w99.0ilfzr")) returned 0 [0109.495] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\Zm9sZGVyLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\zm9szgvylmlj3w99.0ilfzr")) returned 0x20 [0109.495] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="folder.ico", cAlternateFileName="")) returned 0x7d2fd8 [0109.495] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0109.495] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0109.495] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0 [0109.495] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico")) returned 0x20 [0109.495] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0109.496] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0109.497] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\3mV0Zm9sLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\3mv0zm9slmlj3w99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0109.497] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x72ee [0109.497] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0109.498] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0109.619] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x72ee, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x72ee, lpOverlapped=0x0) returned 1 [0109.622] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x7300, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x7300, lpOverlapped=0x0) returned 1 [0109.636] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0109.666] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.678] CloseHandle (hObject=0x208) returned 1 [0109.678] CloseHandle (hObject=0x1fc) returned 1 [0109.680] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\3mV0Zm9sLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\3mv0zm9slmlj3w99.0ilfzr")) returned 0 [0109.680] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\3mV0Zm9sLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\3mv0zm9slmlj3w99.0ilfzr")) returned 0x20 [0109.680] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="netfol.ico", cAlternateFileName="")) returned 0x7d2f58 [0109.680] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="netfol.ico", cAlternateFileName="")) returned 0 [0109.680] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0109.680] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0 [0109.681] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico")) returned 0x20 [0109.681] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0109.681] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0109.681] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cGljdHVyZXM61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cgljdhvyzxm61wnv.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0109.681] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14668 [0109.681] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0109.682] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0109.811] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x14668, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x14668, lpOverlapped=0x0) returned 1 [0109.815] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x14670, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x14670, lpOverlapped=0x0) returned 1 [0109.817] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0109.840] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.856] CloseHandle (hObject=0x1fc) returned 1 [0109.857] CloseHandle (hObject=0x208) returned 1 [0109.859] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cGljdHVyZXM61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cgljdhvyzxm61wnv.0ilfzr")) returned 0 [0109.860] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cGljdHVyZXM61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cgljdhvyzxm61wnv.0ilfzr")) returned 0x20 [0109.860] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="pictures.ico", cAlternateFileName="")) returned 0x7d2fd8 [0109.860] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="pictures.ico", cAlternateFileName="")) returned 0 [0109.860] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0109.860] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0 [0109.860] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico")) returned 0x20 [0109.860] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0109.860] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0109.861] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cmvz33vyy2u67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0109.861] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x536 [0109.861] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0109.862] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0109.929] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x536, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x536, lpOverlapped=0x0) returned 1 [0109.936] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x540, lpOverlapped=0x0) returned 1 [0109.937] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0109.960] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0109.982] CloseHandle (hObject=0x208) returned 1 [0109.989] CloseHandle (hObject=0x1fc) returned 1 [0109.991] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cmvz33vyy2u67g1s.0ilfzr")) returned 0 [0109.992] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cmvz33vyy2u67g1s.0ilfzr")) returned 0x20 [0109.992] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="resource.xml", cAlternateFileName="")) returned 0x7d2c18 [0109.992] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0109.992] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0109.992] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0 [0109.993] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml")) returned 0x20 [0109.993] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0109.993] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0109.995] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cml6Z3Rv3mVzLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cml6z3rv3mvzlmlj3w99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0109.996] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcaa9 [0109.996] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0109.996] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0110.069] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcaa9, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xcaa9, lpOverlapped=0x0) returned 1 [0110.080] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcab0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xcab0, lpOverlapped=0x0) returned 1 [0110.082] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0110.105] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.117] CloseHandle (hObject=0x1fc) returned 1 [0110.117] CloseHandle (hObject=0x208) returned 1 [0110.119] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cml6Z3Rv3mVzLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cml6z3rv3mvzlmlj3w99.0ilfzr")) returned 0 [0110.119] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cml6Z3Rv3mVzLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\cml6z3rv3mvzlmlj3w99.0ilfzr")) returned 0x20 [0110.119] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x7c, cFileName="ringtones.ico", cAlternateFileName="")) returned 0x7d2c98 [0110.119] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x7c, cFileName="ringtones.ico", cAlternateFileName="")) returned 0 [0110.119] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0110.120] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0 [0110.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico")) returned 0x20 [0110.120] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0110.120] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0110.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c2V0dGl6Z3M61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c2v0dgl6z3m61wnv.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0110.125] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10850 [0110.125] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0110.125] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0110.226] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10850, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x10850, lpOverlapped=0x0) returned 1 [0110.229] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x10860, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x10860, lpOverlapped=0x0) returned 1 [0110.231] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0110.257] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.269] CloseHandle (hObject=0x208) returned 1 [0110.269] CloseHandle (hObject=0x1fc) returned 1 [0110.271] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c2V0dGl6Z3M61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c2v0dgl6z3m61wnv.0ilfzr")) returned 0 [0110.272] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c2V0dGl6Z3M61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c2v0dgl6z3m61wnv.0ilfzr")) returned 0x20 [0110.272] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="settings.ico", cAlternateFileName="")) returned 0x7d2998 [0110.272] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="settings.ico", cAlternateFileName="")) returned 0 [0110.272] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0110.272] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0 [0110.272] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico")) returned 0x20 [0110.272] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0110.273] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0110.273] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c3l6Yy5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c3l6yy5py289.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0110.273] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc04b [0110.273] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0110.274] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0110.365] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xc04b, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xc04b, lpOverlapped=0x0) returned 1 [0110.383] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xc050, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xc050, lpOverlapped=0x0) returned 1 [0110.385] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0110.414] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.430] CloseHandle (hObject=0x1fc) returned 1 [0110.431] CloseHandle (hObject=0x208) returned 1 [0110.433] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c3l6Yy5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c3l6yy5py289.0ilfzr")) returned 0 [0110.433] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c3l6Yy5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\c3l6yy5py289.0ilfzr")) returned 0x20 [0110.433] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x74, cFileName="sync.ico", cAlternateFileName="")) returned 0x7d2ad8 [0110.433] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x74, cFileName="sync.ico", cAlternateFileName="")) returned 0 [0110.433] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0110.433] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0 [0110.433] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico")) returned 0x20 [0110.434] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0110.434] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0110.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\dGFz13M67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\dgfz13m67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0110.573] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2aff [0110.573] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0110.573] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0110.650] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2aff, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x2aff, lpOverlapped=0x0) returned 1 [0110.675] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b10, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x2b10, lpOverlapped=0x0) returned 1 [0110.676] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0110.700] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.711] CloseHandle (hObject=0x208) returned 1 [0110.712] CloseHandle (hObject=0x1fc) returned 1 [0110.713] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\dGFz13M67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\dgfz13m67g1s.0ilfzr")) returned 0 [0110.713] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\dGFz13M67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\dgfz13m67g1s.0ilfzr")) returned 0x20 [0110.713] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x74, cFileName="tasks.xml", cAlternateFileName="")) returned 0x7d2f58 [0110.713] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x74, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0110.713] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0110.714] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0 [0110.714] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml")) returned 0x20 [0110.714] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0110.714] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0110.714] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\d21wLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\d21wlmlj3w99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0110.715] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1b9f4 [0110.715] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0110.715] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0110.798] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1b9f4, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1b9f4, lpOverlapped=0x0) returned 1 [0110.810] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1ba00, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1ba00, lpOverlapped=0x0) returned 1 [0110.812] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0110.836] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.850] CloseHandle (hObject=0x1fc) returned 1 [0110.850] CloseHandle (hObject=0x208) returned 1 [0110.853] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\d21wLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\d21wlmlj3w99.0ilfzr")) returned 0 [0110.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\d21wLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\d21wlmlj3w99.0ilfzr")) returned 0x20 [0110.854] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x74, cFileName="wmp.ico", cAlternateFileName="")) returned 0x7d2c18 [0110.854] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x74, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0110.854] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0110.854] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0 [0110.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico")) returned 0x20 [0110.854] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0110.854] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0110.855] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f63692e, dwReserved1=0x63696c6d, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0110.855] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2a18 [0110.856] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.856] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0110.856] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x5d, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0110.856] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x5d, cFileName="..", cAlternateFileName="")) returned 1 [0110.857] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x7cb138, dwReserved1=0x5d, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0110.857] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0110.857] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\cmvz33vyy2u67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0110.858] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5e8 [0110.858] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0110.859] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0111.045] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x5e8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x5e8, lpOverlapped=0x0) returned 1 [0111.047] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x5f0, lpOverlapped=0x0) returned 1 [0111.048] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0111.072] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.126] CloseHandle (hObject=0x1fc) returned 1 [0111.126] CloseHandle (hObject=0x204) returned 1 [0111.128] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\cmvz33vyy2u67g1s.0ilfzr")) returned 0 [0111.128] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\cmVz33VyY2U67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\cmvz33vyy2u67g1s.0ilfzr")) returned 0x20 [0111.128] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x7c, cFileName="resource.xml", cAlternateFileName="")) returned 0x7d29d8 [0111.128] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x7c, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0111.128] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0111.128] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0 [0111.129] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml")) returned 0x20 [0111.129] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x7cb138, dwReserved1=0x5d, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0111.129] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0111.129] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x6372756f, dwReserved1=0x6d782e65, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0111.129] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0111.129] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Zm9sZGVyLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\zm9szgvylmlj3w99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0111.130] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd0a3 [0111.130] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0111.130] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0111.234] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0xd0a3, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xd0a3, lpOverlapped=0x0) returned 1 [0111.239] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xd0b0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xd0b0, lpOverlapped=0x0) returned 1 [0111.241] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0111.276] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.298] CloseHandle (hObject=0x208) returned 1 [0111.298] CloseHandle (hObject=0x204) returned 1 [0111.300] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Zm9sZGVyLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\zm9szgvylmlj3w99.0ilfzr")) returned 0 [0111.301] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\Zm9sZGVyLmlj3w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\zm9szgvylmlj3w99.0ilfzr")) returned 0x20 [0111.301] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="folder.ico", cAlternateFileName="")) returned 0x7d2f58 [0111.301] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0111.301] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0111.301] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0 [0111.301] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico")) returned 0x20 [0111.301] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0111.301] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0111.302] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcHJlZi5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfchjlzi5py289.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0111.302] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe3c8 [0111.302] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0111.303] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0111.409] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0xe3c8, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xe3c8, lpOverlapped=0x0) returned 1 [0111.411] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xe3d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xe3d0, lpOverlapped=0x0) returned 1 [0111.413] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0111.437] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.448] CloseHandle (hObject=0x204) returned 1 [0111.448] CloseHandle (hObject=0x208) returned 1 [0111.458] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcHJlZi5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfchjlzi5py289.0ilfzr")) returned 0 [0111.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcHJlZi5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfchjlzi5py289.0ilfzr")) returned 0x20 [0111.459] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x7c, cFileName="print_pref.ico", cAlternateFileName="")) returned 0x7d2a58 [0111.459] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x7c, cFileName="print_pref.ico", cAlternateFileName="")) returned 0 [0111.459] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0111.459] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0 [0111.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico")) returned 0x20 [0111.459] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0111.460] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0111.460] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcHJvcGVydH561WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfchjvcgvydh561wnv.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0111.460] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xebb8 [0111.460] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0111.461] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0111.587] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0xebb8, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xebb8, lpOverlapped=0x0) returned 1 [0111.627] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xebc0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xebc0, lpOverlapped=0x0) returned 1 [0111.629] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0111.652] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.663] CloseHandle (hObject=0x208) returned 1 [0111.663] CloseHandle (hObject=0x204) returned 1 [0111.665] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcHJvcGVydH561WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfchjvcgvydh561wnv.0ilfzr")) returned 0 [0111.666] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcHJvcGVydH561WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfchjvcgvydh561wnv.0ilfzr")) returned 0x20 [0111.666] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="print_property.ico", cAlternateFileName="")) returned 0x7d2f58 [0111.666] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="print_property.ico", cAlternateFileName="")) returned 0 [0111.666] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0111.666] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0 [0111.666] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico")) returned 0x20 [0111.666] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0111.667] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0111.667] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcXVldWU61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfcxvldwu61wnv.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0111.667] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdff5 [0111.667] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0111.668] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0111.862] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0xdff5, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xdff5, lpOverlapped=0x0) returned 1 [0111.865] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xe000, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xe000, lpOverlapped=0x0) returned 1 [0111.867] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0111.921] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0111.933] CloseHandle (hObject=0x204) returned 1 [0111.933] CloseHandle (hObject=0x208) returned 1 [0111.935] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcXVldWU61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfcxvldwu61wnv.0ilfzr")) returned 0 [0111.935] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\cHJp3nRfcXVldWU61WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\chjp3nrfcxvldwu61wnv.0ilfzr")) returned 0x20 [0111.936] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x7c, cFileName="print_queue.ico", cAlternateFileName="")) returned 0x7d2d58 [0111.936] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x7c, cFileName="print_queue.ico", cAlternateFileName="")) returned 0 [0111.936] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0111.936] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0 [0111.936] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico")) returned 0x20 [0111.936] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0111.936] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0111.937] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l861WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l861wnv.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0111.937] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xec75 [0111.937] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0111.938] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0112.097] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0xec75, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xec75, lpOverlapped=0x0) returned 1 [0112.100] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xec80, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xec80, lpOverlapped=0x0) returned 1 [0112.102] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0112.220] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.231] CloseHandle (hObject=0x208) returned 1 [0112.231] CloseHandle (hObject=0x204) returned 1 [0112.234] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l861WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l861wnv.0ilfzr")) returned 0 [0112.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l861WNv.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l861wnv.0ilfzr")) returned 0x20 [0112.234] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="scan_.ico", cAlternateFileName="")) returned 0x7d2cd8 [0112.234] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="scan_.ico", cAlternateFileName="")) returned 0 [0112.234] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0112.234] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0 [0112.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico")) returned 0x20 [0112.235] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0112.235] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0112.235] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l9wcm9wZXJ07S5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l9wcm9wzxj07s5py289.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0112.236] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10654 [0112.236] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0112.237] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0112.455] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10654, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x10654, lpOverlapped=0x0) returned 1 [0112.468] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x10660, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x10660, lpOverlapped=0x0) returned 1 [0112.470] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0112.493] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.567] CloseHandle (hObject=0x204) returned 1 [0112.567] CloseHandle (hObject=0x208) returned 1 [0112.570] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l9wcm9wZXJ07S5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l9wcm9wzxj07s5py289.0ilfzr")) returned 0 [0112.570] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l9wcm9wZXJ07S5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l9wcm9wzxj07s5py289.0ilfzr")) returned 0x20 [0112.570] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="scan_property.ico", cAlternateFileName="")) returned 0x7d2f58 [0112.570] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="scan_property.ico", cAlternateFileName="")) returned 0 [0112.570] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0112.570] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0 [0112.571] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico")) returned 0x20 [0112.571] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0112.571] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0112.571] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l9zZXR01W5ncy5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l9zzxr01w5ncy5py289.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0112.571] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf8c2 [0112.571] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0112.572] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0112.687] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0xf8c2, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xf8c2, lpOverlapped=0x0) returned 1 [0112.703] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xf8d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0xf8d0, lpOverlapped=0x0) returned 1 [0112.705] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0112.729] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.740] CloseHandle (hObject=0x208) returned 1 [0112.741] CloseHandle (hObject=0x204) returned 1 [0112.743] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l9zZXR01W5ncy5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l9zzxr01w5ncy5py289.0ilfzr")) returned 0 [0112.743] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2N23l9zZXR01W5ncy5pY289.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\c2n23l9zzxr01w5ncy5py289.0ilfzr")) returned 0x20 [0112.743] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="scan_settings.ico", cAlternateFileName="")) returned 0x7d2d58 [0112.743] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="scan_settings.ico", cAlternateFileName="")) returned 0 [0112.743] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0112.743] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0 [0112.744] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico")) returned 0x20 [0112.744] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0112.744] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0112.744] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\dGFz13M67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\dgfz13m67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0112.744] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c64 [0112.744] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0112.745] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0112.841] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c64, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x2c64, lpOverlapped=0x0) returned 1 [0112.844] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c70, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x2c70, lpOverlapped=0x0) returned 1 [0112.845] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0112.875] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0112.886] CloseHandle (hObject=0x204) returned 1 [0112.886] CloseHandle (hObject=0x208) returned 1 [0112.887] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\dGFz13M67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\dgfz13m67g1s.0ilfzr")) returned 0 [0112.888] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\dGFz13M67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\dgfz13m67g1s.0ilfzr")) returned 0x20 [0112.888] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="tasks.xml", cAlternateFileName="")) returned 0x7d2958 [0112.888] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0112.888] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0112.888] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0 [0112.888] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml")) returned 0x20 [0112.888] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0112.888] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0112.889] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f63692e, dwReserved1=0x63696c6d, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0112.889] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0112.889] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x38643230, dwReserved1=0x352d3731, cFileName="Task", cAlternateFileName="")) returned 0 [0112.889] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0112.889] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4665636b, dwReserved1=0x32737969, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0112.889] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName=".", cAlternateFileName="")) returned 0x7d2958 [0112.891] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName="..", cAlternateFileName="")) returned 1 [0112.891] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName="..", cAlternateFileName="")) returned 0 [0112.891] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0112.891] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x4665636b, dwReserved1=0x32737969, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0112.891] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName=".", cAlternateFileName="")) returned 0x7d2998 [0112.892] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName="..", cAlternateFileName="")) returned 1 [0112.892] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0112.892] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0112.893] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName="..", cAlternateFileName="")) returned 1 [0112.893] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName="..", cAlternateFileName="")) returned 0 [0112.893] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0112.893] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x34656235, dwReserved1=0x662d6432, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0112.893] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0112.893] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName="..", cAlternateFileName="")) returned 1 [0112.893] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0112.893] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\windows.uif_ondemand.xml.inbox"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0112.895] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\d2l6ZG93cy511WZf3255ZW123mQ67G1sLml6Ym94.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\d2l6zg93cy511wzf3255zw123mq67g1slml6ym94.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0112.902] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9d0 [0112.902] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0112.903] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0112.974] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x9d0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x9d0, lpOverlapped=0x0) returned 1 [0112.981] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x9e0, lpOverlapped=0x0) returned 1 [0112.982] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0113.005] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.016] CloseHandle (hObject=0x1f8) returned 1 [0113.016] CloseHandle (hObject=0x208) returned 1 [0113.017] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\windows.uif_ondemand.xml.inbox"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\d2l6ZG93cy511WZf3255ZW123mQ67G1sLml6Ym94.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\d2l6zg93cy511wzf3255zw123mq67g1slml6ym94.0ilfzr")) returned 0 [0113.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\d2l6ZG93cy511WZf3255ZW123mQ67G1sLml6Ym94.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\d2l6zg93cy511wzf3255zw123mq67g1slml6ym94.0ilfzr")) returned 0x20 [0113.018] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 0x7d2b18 [0113.018] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 0 [0113.018] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0113.019] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\windows.uif_ondemand.xml.inbox")) returned 1 [0113.020] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\windows.uif_ondemand.xml.inbox" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\windows.uif_ondemand.xml.inbox")) returned 0xffffffff [0113.020] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x782e736b, dwReserved1=0x6e696c6d, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 0 [0113.020] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0113.020] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x73776f64, dwReserved1=0x6669752e, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0113.020] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0113.023] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.023] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0113.024] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.024] CloseHandle (hObject=0xffffffff) returned 1 [0113.024] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5L5FTTS1X1W5533dzRGVmYXVsdC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5l5ftts1x1w5533dzrgvmyxvsdc5qc296.0ilfzr")) returned 0 [0113.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5L5FTTS1X1W5533dzRGVmYXVsdC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5l5ftts1x1w5533dzrgvmyxvsdc5qc296.0ilfzr")) returned 0xffffffff [0113.025] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 0x7d2b18 [0113.025] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 0 [0113.025] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0113.025] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json")) returned 1 [0113.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json")) returned 0xffffffff [0113.026] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0113.026] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0113.026] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5L5FTTS1X1W5533dzRGVmYXVsdC5qc296LmJr.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5l5ftts1x1w5533dzrgvmyxvsdc5qc296lmjr.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0113.027] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x44f [0113.027] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0113.027] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0113.140] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x44f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x44f, lpOverlapped=0x0) returned 1 [0113.143] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x460, lpOverlapped=0x0) returned 1 [0113.144] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0113.182] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.196] CloseHandle (hObject=0x208) returned 1 [0113.197] CloseHandle (hObject=0x1f8) returned 1 [0113.204] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5L5FTTS1X1W5533dzRGVmYXVsdC5qc296LmJr.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5l5ftts1x1w5533dzrgvmyxvsdc5qc296lmjr.0ilfzr")) returned 0 [0113.206] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5L5FTTS1X1W5533dzRGVmYXVsdC5qc296LmJr.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5l5ftts1x1w5533dzrgvmyxvsdc5qc296lmjr.0ilfzr")) returned 0x20 [0113.206] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x7c, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 0x7d2a18 [0113.207] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x7c, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 0 [0113.207] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0113.207] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk")) returned 1 [0113.208] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk")) returned 0xffffffff [0113.208] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x7cb140, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0113.209] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.210] CloseHandle (hObject=0xffffffff) returned 1 [0113.210] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\VEVMRU1FVFJZL5FTTS1XSU5ET1dTU1E61nNv3g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\vevmru1fvfjzl5ftts1xsu5et1dtu1e61nnv3g99.0ilfzr")) returned 0 [0113.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\VEVMRU1FVFJZL5FTTS1XSU5ET1dTU1E61nNv3g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\vevmru1fvfjzl5ftts1xsu5et1dtu1e61nnv3g99.0ilfzr")) returned 0xffffffff [0113.211] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 0x7d2b58 [0113.211] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x7c87e8, dwReserved1=0x7ea388, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 0 [0113.211] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0113.211] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json")) returned 1 [0113.212] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json")) returned 0xffffffff [0113.212] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0113.212] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.213] CloseHandle (hObject=0xffffffff) returned 1 [0113.213] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5LlAtQVJJQS04OTQ2MjZiYTQ2NDM0Zjl2YjQ0MWR5N2ViZGEyYWE2NC01ZjY0YmViYi12YzI4LTRjYzctYmQ1Mi01NzBjOGZlMDc3Yz5tNzc4Ny5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5llatqvjjqs04otq2mjziytq2ndm0zjl2yjq0mwr5n2vizgeyywe2nc01zjy0ymviyi12yzi4ltrjyzctymq1mi01nzbjogzlmdc3yz5tnzc4ny5qc296.0ilfzr")) returned 0 [0113.213] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5LlAtQVJJQS04OTQ2MjZiYTQ2NDM0Zjl2YjQ0MWR5N2ViZGEyYWE2NC01ZjY0YmViYi12YzI4LTRjYzctYmQ1Mi01NzBjOGZlMDc3Yz5tNzc4Ny5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5llatqvjjqs04otq2mjziytq2ndm0zjl2yjq0mwr5n2vizgeyywe2nc01zjy0ymviyi12yzi4ltrjyzctymq1mi01nzbjogzlmdc3yz5tnzc4ny5qc296.0ilfzr")) returned 0xffffffff [0113.213] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 0x7d2f58 [0113.213] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 0 [0113.213] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.213] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json")) returned 1 [0113.214] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json")) returned 0xffffffff [0113.214] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0113.214] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.221] CloseHandle (hObject=0xffffffff) returned 1 [0113.221] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5LlAtQVJJQS0zMWY4ZjAwZjc1ZWU0M2Q0OT52NzYyNjI1YjY5MTdmMi1jZTc3ZD52Zi1lZWM4LTQwNjMtYTA1YS0wOTcyMGY1YmJmMWItNzEzOC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5llatqvjjqs0zmwy4zjawzjc1zwu0m2q0ot52nzyynji1yjy5mtdmmi1jztc3zd52zi1lzwm4ltqwnjmtyta1ys0wotcymgy1ymjmmwitnzezoc5qc296.0ilfzr")) returned 0 [0113.221] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5LlAtQVJJQS0zMWY4ZjAwZjc1ZWU0M2Q0OT52NzYyNjI1YjY5MTdmMi1jZTc3ZD52Zi1lZWM4LTQwNjMtYTA1YS0wOTcyMGY1YmJmMWItNzEzOC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5llatqvjjqs0zmwy4zjawzjc1zwu0m2q0ot52nzyynji1yjy5mtdmmi1jztc3zd52zi1lzwm4ltqwnjmtyta1ys0wotcymgy1ymjmmwitnzezoc5qc296.0ilfzr")) returned 0xffffffff [0113.221] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 0x7d2f58 [0113.221] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 0 [0113.221] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.222] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json")) returned 1 [0113.222] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json")) returned 0xffffffff [0113.222] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0113.222] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.223] CloseHandle (hObject=0xffffffff) returned 1 [0113.223] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5LlAtQVJJQS01NDc2ZDBjNGE3YTM0Nz5wOWM0Yj22MTMwNz25NDM5MC1mOGJ5Y2VjZi0yNDNmLTQwZjgtYjdjMy1iOWM0NGE1N2RlYWQtNzIzMC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5llatqvjjqs01ndc2zdbjnge3ytm0nz5wowm0yj22mtmwnz25ndm5mc1mogj5y2vjzi0yndnmltqwzjgtyjdjmy1iowm0nge1n2rlywqtnzizmc5qc296.0ilfzr")) returned 0 [0113.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dGVsZW1ldHJ5LlAtQVJJQS01NDc2ZDBjNGE3YTM0Nz5wOWM0Yj22MTMwNz25NDM5MC1mOGJ5Y2VjZi0yNDNmLTQwZjgtYjdjMy1iOWM0NGE1N2RlYWQtNzIzMC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dgvszw1ldhj5llatqvjjqs01ndc2zdbjnge3ytm0nz5wowm0yj22mtmwnz25ndm5mc1mogj5y2vjzi0yndnmltqwzjgtyjdjmy1iowm0nge1n2rlywqtnzizmc5qc296.0ilfzr")) returned 0xffffffff [0113.224] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 0x7d2ad8 [0113.224] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 0 [0113.224] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0113.224] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json")) returned 1 [0113.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json")) returned 0xffffffff [0113.224] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0113.225] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.226] CloseHandle (hObject=0xffffffff) returned 1 [0113.226] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmFwcC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmfwcc5qc296.0ilfzr")) returned 0 [0113.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmFwcC5qc296.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmfwcc5qc296.0ilfzr")) returned 0xffffffff [0113.226] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x5c, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 0x7d2c98 [0113.226] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x5c, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 0 [0113.226] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0113.227] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json")) returned 1 [0113.227] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json")) returned 0xffffffff [0113.227] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x7ce358, dwReserved1=0x0, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0113.227] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0113.227] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmFwcC5qc296LmJr.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmfwcc5qc296lmjr.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0113.228] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x67f [0113.228] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0113.229] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0113.402] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x67f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x67f, lpOverlapped=0x0) returned 1 [0113.404] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x690, lpOverlapped=0x0) returned 1 [0113.405] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0113.429] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.457] CloseHandle (hObject=0x1f8) returned 1 [0113.457] CloseHandle (hObject=0x208) returned 1 [0113.458] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmFwcC5qc296LmJr.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmfwcc5qc296lmjr.0ilfzr")) returned 0 [0113.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmFwcC5qc296LmJr.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmfwcc5qc296lmjr.0ilfzr")) returned 0x20 [0113.459] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 0x7d2b18 [0113.459] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 0 [0113.459] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0113.459] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk")) returned 1 [0113.460] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk")) returned 0xffffffff [0113.460] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0113.460] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.461] CloseHandle (hObject=0xffffffff) returned 1 [0113.461] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmNlcnQ61nNv3g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmnlcnq61nnv3g99.0ilfzr")) returned 0 [0113.461] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\dXRjLmNlcnQ61nNv3g99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\dxrjlmnlcnq61nnv3g99.0ilfzr")) returned 0xffffffff [0113.461] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 0x7d3018 [0113.461] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 0 [0113.461] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0113.461] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json")) returned 1 [0113.462] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json")) returned 0xffffffff [0113.462] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 0 [0113.462] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0113.462] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7265632e, dwReserved1=0x736a2e74, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0113.462] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce358, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0113.465] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce358, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.465] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d5cadbc, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce358, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0113.465] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce350, dwReserved1=0x47, cFileName=".", cAlternateFileName="")) returned 0x7d2b98 [0113.465] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce350, dwReserved1=0x47, cFileName="..", cAlternateFileName="")) returned 1 [0113.465] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x7ce350, dwReserved1=0x47, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0113.465] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\autologger-diagtrack-listener.etl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0113.466] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\QXV0304vZ2dlci1E1WFndHJ2Y2stTGlzdGV6ZXI6ZXRs.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\qxv0304vz2dlci1e1wfndhj2y2sttglzdgv6zxi6zxrs.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0113.466] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x30000 [0113.467] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0113.467] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0113.598] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x30000, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x30000, lpOverlapped=0x0) returned 1 [0113.603] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x30010, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x30010, lpOverlapped=0x0) returned 1 [0113.606] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0113.631] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.656] CloseHandle (hObject=0x1f8) returned 1 [0113.657] CloseHandle (hObject=0x204) returned 1 [0113.661] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\autologger-diagtrack-listener.etl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\QXV0304vZ2dlci1E1WFndHJ2Y2stTGlzdGV6ZXI6ZXRs.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\qxv0304vz2dlci1e1wfndhj2y2sttglzdgv6zxi6zxrs.0ilfzr")) returned 0 [0113.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\QXV0304vZ2dlci1E1WFndHJ2Y2stTGlzdGV6ZXI6ZXRs.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\qxv0304vz2dlci1e1wfndhj2y2sttglzdgv6zxi6zxrs.0ilfzr")) returned 0x20 [0113.662] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\AutoLogger-Diagtrack-Listener.etl", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0x7d2a98 [0113.662] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0113.662] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0113.662] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\autologger-diagtrack-listener.etl")) returned 1 [0113.664] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\autologger-diagtrack-listener.etl")) returned 0xffffffff [0113.664] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x7ce350, dwReserved1=0x47, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0113.664] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0113.664] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c6f, dwReserved1=0x2d726567, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0113.665] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2ad8 [0113.665] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.665] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.665] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0113.665] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c6f, dwReserved1=0x2d726567, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0113.665] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0113.666] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.666] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0113.666] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\autologger-diagtrack-listener.etl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.667] CloseHandle (hObject=0xffffffff) returned 1 [0113.667] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\autologger-diagtrack-listener.etl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\QXV0304vZ2dlci1E1WFndHJ2Y2stTGlzdGV6ZXI6ZXRs.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\qxv0304vz2dlci1e1wfndhj2y2sttglzdgv6zxi6zxrs.0ilfzr")) returned 0 [0113.667] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\QXV0304vZ2dlci1E1WFndHJ2Y2stTGlzdGV6ZXI6ZXRs.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\qxv0304vz2dlci1e1wfndhj2y2sttglzdgv6zxi6zxrs.0ilfzr")) returned 0xffffffff [0113.667] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\AutoLogger-Diagtrack-Listener.etl", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x7c, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0x7d2c58 [0113.667] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x7c, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0113.667] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0113.668] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\autologger-diagtrack-listener.etl")) returned 1 [0113.668] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\AutoLogger-Diagtrack-Listener.etl" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\autologger-diagtrack-listener.etl")) returned 0xffffffff [0113.668] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x7cb138, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0113.668] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.668] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676f4c6f, dwReserved1=0x2d726567, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0113.669] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0113.669] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x776f6474, dwReserved1=0x676f4c6e, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 1 [0113.669] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_costdeferred.rbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.670] CloseHandle (hObject=0xffffffff) returned 1 [0113.670] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_costdeferred.rbs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX0Nvc3REZWZlcnJlZC5yYnM9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx0nvc3rezwzlcnjlzc5yynm9.0ilfzr")) returned 0 [0113.670] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX0Nvc3REZWZlcnJlZC5yYnM9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx0nvc3rezwzlcnjlzc5yynm9.0ilfzr")) returned 0xffffffff [0113.670] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 0x7d2b18 [0113.670] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 0 [0113.670] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0113.670] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_costdeferred.rbs")) returned 1 [0113.671] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_CostDeferred.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_costdeferred.rbs")) returned 0xffffffff [0113.671] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 1 [0113.671] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Normal.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normal.rbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.671] CloseHandle (hObject=0xffffffff) returned 1 [0113.671] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Normal.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normal.rbs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX05vcm123C5yYnM9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx05vcm123c5yynm9.0ilfzr")) returned 0 [0113.671] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX05vcm123C5yYnM9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx05vcm123c5yynm9.0ilfzr")) returned 0xffffffff [0113.671] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Normal.rbs", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 0x7d2c98 [0113.671] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 0 [0113.671] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0113.672] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Normal.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normal.rbs")) returned 1 [0113.672] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Normal.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normal.rbs")) returned 0xffffffff [0113.672] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 1 [0113.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normalcritical.rbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.672] CloseHandle (hObject=0xffffffff) returned 1 [0113.672] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normalcritical.rbs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX05vcm123ENy1XRpY2FsLnJicw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx05vcm123eny1xrpy2fslnjicw99.0ilfzr")) returned 0 [0113.672] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX05vcm123ENy1XRpY2FsLnJicw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx05vcm123eny1xrpy2fslnjicw99.0ilfzr")) returned 0xffffffff [0113.673] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x5c, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 0x7d3098 [0113.673] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x5c, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 0 [0113.673] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0113.673] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normalcritical.rbs")) returned 1 [0113.673] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_NormalCritical.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_normalcritical.rbs")) returned 0xffffffff [0113.673] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 1 [0113.673] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Realtime.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_realtime.rbs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.674] CloseHandle (hObject=0xffffffff) returned 1 [0113.674] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Realtime.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_realtime.rbs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX1JlYW401W1lLnJicw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx1jlyw401w1llnjicw99.0ilfzr")) returned 0 [0113.674] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\RXZl3nRzX1JlYW401W1lLnJicw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\rxzl3nrzx1jlyw401w1llnjicw99.0ilfzr")) returned 0xffffffff [0113.674] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Realtime.rbs", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 0x7d2b18 [0113.674] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 0 [0113.674] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0113.675] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Realtime.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_realtime.rbs")) returned 1 [0113.675] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Events_Realtime.rbs" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\events_realtime.rbs")) returned 0xffffffff [0113.675] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0113.675] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201fc, dwReserved1=0x4, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0113.675] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201fc, dwReserved1=0x4, cFileName="..", cAlternateFileName="")) returned 1 [0113.675] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201fc, dwReserved1=0x4, cFileName="..", cAlternateFileName="")) returned 0 [0113.675] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.675] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="osver.txt", cAlternateFileName="")) returned 1 [0113.675] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.676] CloseHandle (hObject=0xffffffff) returned 1 [0113.676] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\33N2ZXI6dH20.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\33n2zxi6dh20.0ilfzr")) returned 0 [0113.676] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\33N2ZXI6dH20.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\33n2zxi6dh20.0ilfzr")) returned 0xffffffff [0113.676] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x7c86a8, dwReserved1=0x7de328, cFileName="osver.txt", cAlternateFileName="")) returned 0x7d29d8 [0113.676] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x7c86a8, dwReserved1=0x7de328, cFileName="osver.txt", cAlternateFileName="")) returned 0 [0113.676] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0113.676] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt")) returned 1 [0113.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt")) returned 0xffffffff [0113.677] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0113.677] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.677] CloseHandle (hObject=0xffffffff) returned 1 [0113.677] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\cGFyc2U6ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\cgfyc2u6zgf0.0ilfzr")) returned 0 [0113.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\cGFyc2U6ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\cgfyc2u6zgf0.0ilfzr")) returned 0xffffffff [0113.677] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7c86a8, dwReserved1=0x7de328, cFileName="parse.dat", cAlternateFileName="")) returned 0x7d2c18 [0113.677] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7c86a8, dwReserved1=0x7de328, cFileName="parse.dat", cAlternateFileName="")) returned 0 [0113.677] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0113.677] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat")) returned 1 [0113.678] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat")) returned 0xffffffff [0113.678] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sideload", cAlternateFileName="")) returned 1 [0113.678] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0113.678] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName="..", cAlternateFileName="")) returned 1 [0113.678] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName="..", cAlternateFileName="")) returned 0 [0113.678] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0113.678] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0113.678] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0113.678] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName="..", cAlternateFileName="")) returned 1 [0113.679] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName="..", cAlternateFileName="")) returned 0 [0113.679] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.679] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0113.679] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName=".", cAlternateFileName="")) returned 0x7d2c98 [0113.680] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName="..", cAlternateFileName="")) returned 1 [0113.681] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0xfffffffe, dwReserved1=0x30, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0113.681] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.681] CloseHandle (hObject=0xffffffff) returned 1 [0113.681] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\MDN5MWU4ZGEtZjU4MC00NWQ3LWFmZGQtMzU5OGV5N2N5YmE0X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mdn5mwu4zgetzju4mc00nwq3lwfmzgqtmzu5ogv5n2n5yme0x3no33c67g1s.0ilfzr")) returned 0 [0113.682] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\MDN5MWU4ZGEtZjU4MC00NWQ3LWFmZGQtMzU5OGV5N2N5YmE0X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mdn5mwu4zgetzju4mc00nwq3lwfmzgqtmzu5ogv5n2n5yme0x3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.682] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 0x7d2f58 [0113.682] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 0 [0113.682] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.682] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml")) returned 1 [0113.682] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml")) returned 0xffffffff [0113.682] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0113.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.683] CloseHandle (hObject=0xffffffff) returned 1 [0113.683] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\MDN5MWU4ZGEtZjU4MC00NWQ3LWFmZGQtMzU5OGV5N2N5YmE0X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mdn5mwu4zgetzju4mc00nwq3lwfmzgqtmzu5ogv5n2n5yme0x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.683] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\MDN5MWU4ZGEtZjU4MC00NWQ3LWFmZGQtMzU5OGV5N2N5YmE0X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mdn5mwu4zgetzju4mc00nwq3lwfmzgqtmzu5ogv5n2n5yme0x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.684] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x88, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 0x7d2d18 [0113.684] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x88, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 0 [0113.684] FindClose (in: hFindFile=0x7d2d18 | out: hFindFile=0x7d2d18) returned 1 [0113.684] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml")) returned 1 [0113.684] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml")) returned 0xffffffff [0113.684] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0113.685] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.685] CloseHandle (hObject=0xffffffff) returned 1 [0113.685] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\Mz50YjdiMzYtNDFiOS00MDMyLT54NzUtYzAyNDBjYTV2N2Y1X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mz50yjdimzytndfios00mdmylt54nzutyzayndbjytv2n2y1x3no33c67g1s.0ilfzr")) returned 0 [0113.685] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\Mz50YjdiMzYtNDFiOS00MDMyLT54NzUtYzAyNDBjYTV2N2Y1X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mz50yjdimzytndfios00mdmylt54nzutyzayndbjytv2n2y1x3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.685] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 0x7d2f58 [0113.685] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 0 [0113.685] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.685] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml")) returned 1 [0113.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml")) returned 0xffffffff [0113.686] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0113.686] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.686] CloseHandle (hObject=0xffffffff) returned 1 [0113.686] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\Mz50YjdiMzYtNDFiOS00MDMyLT54NzUtYzAyNDBjYTV2N2Y1X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mz50yjdimzytndfios00mdmylt54nzutyzayndbjytv2n2y1x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\Mz50YjdiMzYtNDFiOS00MDMyLT54NzUtYzAyNDBjYTV2N2Y1X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\mz50yjdimzytndfios00mdmylt54nzutyzayndbjytv2n2y1x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.686] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x88, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 0x7d2f58 [0113.686] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x88, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 0 [0113.686] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.687] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml")) returned 1 [0113.687] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml")) returned 0xffffffff [0113.687] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0113.687] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.728] CloseHandle (hObject=0xffffffff) returned 1 [0113.728] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\NzVlZjViNDEtNTc4ZC00YTRiLT5yYmItOGI5ZjdmZGM4MzFmX3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\nzvlzjvindetntc4zc00ytrilt5yymitogi5zjdmzgm4mzfmx3no33c67g1s.0ilfzr")) returned 0 [0113.729] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\NzVlZjViNDEtNTc4ZC00YTRiLT5yYmItOGI5ZjdmZGM4MzFmX3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\nzvlzjvindetntc4zc00ytrilt5yymitogi5zjdmzgm4mzfmx3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.729] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 0x7d2f58 [0113.729] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 0 [0113.729] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.729] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml")) returned 1 [0113.730] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml")) returned 0xffffffff [0113.730] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0113.730] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.730] CloseHandle (hObject=0xffffffff) returned 1 [0113.730] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\NzVlZjViNDEtNTc4ZC00YTRiLT5yYmItOGI5ZjdmZGM4MzFmX3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\nzvlzjvindetntc4zc00ytrilt5yymitogi5zjdmzgm4mzfmx3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.730] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\NzVlZjViNDEtNTc4ZC00YTRiLT5yYmItOGI5ZjdmZGM4MzFmX3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\nzvlzjvindetntc4zc00ytrilt5yymitogi5zjdmzgm4mzfmx3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.730] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x88, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 0x7d2cd8 [0113.730] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x88, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 0 [0113.730] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0113.731] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml")) returned 1 [0113.731] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml")) returned 0xffffffff [0113.731] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0113.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.732] CloseHandle (hObject=0xffffffff) returned 1 [0113.732] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\OT54NGVjYzAtOTM4Yy00ZmViLTg5OTYtMjAzYTZmZmF2ODUyX3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ot54ngvjyzatotm4yy00zmviltg5otytmjazytzmzmf2oduyx3no33c67g1s.0ilfzr")) returned 0 [0113.732] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\OT54NGVjYzAtOTM4Yy00ZmViLTg5OTYtMjAzYTZmZmF2ODUyX3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ot54ngvjyzatotm4yy00zmviltg5otytmjazytzmzmf2oduyx3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.732] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 0x7d29d8 [0113.732] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 0 [0113.732] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0113.732] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml")) returned 1 [0113.733] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml")) returned 0xffffffff [0113.733] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0113.733] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.733] CloseHandle (hObject=0xffffffff) returned 1 [0113.733] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\OT54NGVjYzAtOTM4Yy00ZmViLTg5OTYtMjAzYTZmZmF2ODUyX3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ot54ngvjyzatotm4yy00zmviltg5otytmjazytzmzmf2oduyx3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.733] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\OT54NGVjYzAtOTM4Yy00ZmViLTg5OTYtMjAzYTZmZmF2ODUyX3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ot54ngvjyzatotm4yy00zmviltg5otytmjazytzmzmf2oduyx3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.733] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x88, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 0x7d2a58 [0113.733] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x88, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 0 [0113.733] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0113.733] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml")) returned 1 [0113.734] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml")) returned 0xffffffff [0113.734] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0113.734] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.735] CloseHandle (hObject=0xffffffff) returned 1 [0113.735] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YWN2ZTQyMDgtMGFjNC00ZWY3LWFjNDUtYmI2OD2iMDllNTU5X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ywn2ztqymdgtmgfjnc00zwy3lwfjndutymi2od2imdllntu5x3no33c67g1s.0ilfzr")) returned 0 [0113.735] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YWN2ZTQyMDgtMGFjNC00ZWY3LWFjNDUtYmI2OD2iMDllNTU5X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ywn2ztqymdgtmgfjnc00zwy3lwfjndutymi2od2imdllntu5x3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.735] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 0x7d2cd8 [0113.735] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 0 [0113.735] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0113.735] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml")) returned 1 [0113.736] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml")) returned 0xffffffff [0113.736] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0113.736] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.736] CloseHandle (hObject=0xffffffff) returned 1 [0113.736] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YWN2ZTQyMDgtMGFjNC00ZWY3LWFjNDUtYmI2OD2iMDllNTU5X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ywn2ztqymdgtmgfjnc00zwy3lwfjndutymi2od2imdllntu5x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.736] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YWN2ZTQyMDgtMGFjNC00ZWY3LWFjNDUtYmI2OD2iMDllNTU5X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ywn2ztqymdgtmgfjnc00zwy3lwfjndutymi2od2imdllntu5x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.736] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x88, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 0x7d2f58 [0113.736] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x88, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 0 [0113.737] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.737] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml")) returned 1 [0113.737] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml")) returned 0xffffffff [0113.737] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0113.737] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.737] CloseHandle (hObject=0xffffffff) returned 1 [0113.737] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YzA4MDI1OTctNjE3NC00ODd2LWI3ZGUtMjBlOGI4YWEzODRlX3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\yza4mdi1otctnje3nc00odd2lwi3zgutmjblogi4ywezodrlx3no33c67g1s.0ilfzr")) returned 0 [0113.738] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YzA4MDI1OTctNjE3NC00ODd2LWI3ZGUtMjBlOGI4YWEzODRlX3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\yza4mdi1otctnje3nc00odd2lwi3zgutmjblogi4ywezodrlx3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.738] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 0x7d2d58 [0113.738] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 0 [0113.738] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0113.738] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml")) returned 1 [0113.738] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml")) returned 0xffffffff [0113.738] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0113.739] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.739] CloseHandle (hObject=0xffffffff) returned 1 [0113.739] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YzA4MDI1OTctNjE3NC00ODd2LWI3ZGUtMjBlOGI4YWEzODRlX3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\yza4mdi1otctnje3nc00odd2lwi3zgutmjblogi4ywezodrlx3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.739] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\YzA4MDI1OTctNjE3NC00ODd2LWI3ZGUtMjBlOGI4YWEzODRlX3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\yza4mdi1otctnje3nc00odd2lwi3zgutmjblogi4ywezodrlx3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.739] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x88, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 0x7d2b98 [0113.739] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x88, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 0 [0113.739] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0113.739] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml")) returned 1 [0113.740] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml")) returned 0xffffffff [0113.740] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0113.740] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.740] CloseHandle (hObject=0xffffffff) returned 1 [0113.740] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTgwYzg1NWMtZDc1Yy00N2I4LTl2ZTQtZjA3Zj2jNmM2MTN5X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztgwyzg1nwmtzdc1yy00n2i4ltl2ztqtzja3zj2jnmm2mtn5x3no33c67g1s.0ilfzr")) returned 0 [0113.741] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTgwYzg1NWMtZDc1Yy00N2I4LTl2ZTQtZjA3Zj2jNmM2MTN5X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztgwyzg1nwmtzdc1yy00n2i4ltl2ztqtzja3zj2jnmm2mtn5x3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.741] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 0x7d2c58 [0113.741] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 0 [0113.741] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0113.741] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml")) returned 1 [0113.741] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml")) returned 0xffffffff [0113.741] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0113.742] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.742] CloseHandle (hObject=0xffffffff) returned 1 [0113.742] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTgwYzg1NWMtZDc1Yy00N2I4LTl2ZTQtZjA3Zj2jNmM2MTN5X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztgwyzg1nwmtzdc1yy00n2i4ltl2ztqtzja3zj2jnmm2mtn5x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.742] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTgwYzg1NWMtZDc1Yy00N2I4LTl2ZTQtZjA3Zj2jNmM2MTN5X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztgwyzg1nwmtzdc1yy00n2i4ltl2ztqtzja3zj2jnmm2mtn5x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.742] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x88, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 0x7d2b58 [0113.742] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x88, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 0 [0113.742] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0113.742] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml")) returned 1 [0113.743] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml")) returned 0xffffffff [0113.743] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0113.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.743] CloseHandle (hObject=0xffffffff) returned 1 [0113.743] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTl5MjE3NTItOGZjOS00Nz5zLWI0MmUtMzM4MDViMDc4YTU4X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztl5mje3ntitogzjos00nz5zlwi0mmutmzm4mdvimdc4ytu4x3no33c67g1s.0ilfzr")) returned 0 [0113.743] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTl5MjE3NTItOGZjOS00Nz5zLWI0MmUtMzM4MDViMDc4YTU4X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztl5mje3ntitogzjos00nz5zlwi0mmutmzm4mdvimdc4ytu4x3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.743] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 0x7d2b18 [0113.743] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 0 [0113.743] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0113.744] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml")) returned 1 [0113.744] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml")) returned 0xffffffff [0113.744] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0113.744] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.745] CloseHandle (hObject=0xffffffff) returned 1 [0113.745] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTl5MjE3NTItOGZjOS00Nz5zLWI0MmUtMzM4MDViMDc4YTU4X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztl5mje3ntitogzjos00nz5zlwi0mmutmzm4mdvimdc4ytu4x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZTl5MjE3NTItOGZjOS00Nz5zLWI0MmUtMzM4MDViMDc4YTU4X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\ztl5mje3ntitogzjos00nz5zlwi0mmutmzm4mdvimdc4ytu4x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.745] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x88, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 0x7d2a58 [0113.745] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x88, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 0 [0113.745] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0113.745] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml")) returned 1 [0113.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml")) returned 0xffffffff [0113.746] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0113.746] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.746] CloseHandle (hObject=0xffffffff) returned 1 [0113.746] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZmZmZD2iNWQtMDE3Mi00NzE5LWE3OTItYjdjNzY5ODY0NTl5X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\zmzmzd2inwqtmde3mi00nze5lwe3otityjdjnzy5ody0ntl5x3no33c67g1s.0ilfzr")) returned 0 [0113.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZmZmZD2iNWQtMDE3Mi00NzE5LWE3OTItYjdjNzY5ODY0NTl5X3No33c67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\zmzmzd2inwqtmde3mi00nze5lwe3otityjdjnzy5ody0ntl5x3no33c67g1s.0ilfzr")) returned 0xffffffff [0113.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 0x7d2ad8 [0113.746] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 0 [0113.747] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0113.747] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml")) returned 1 [0113.747] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml")) returned 0xffffffff [0113.747] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0113.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.748] CloseHandle (hObject=0xffffffff) returned 1 [0113.748] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZmZmZD2iNWQtMDE3Mi00NzE5LWE3OTItYjdjNzY5ODY0NTl5X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\zmzmzd2inwqtmde3mi00nze5lwe3otityjdjnzy5ody0ntl5x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0 [0113.748] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\ZmZmZD2iNWQtMDE3Mi00NzE5LWE3OTItYjdjNzY5ODY0NTl5X3dpdG25cmF3Ln2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\zmzmzd2inwqtmde3mi00nze5lwe3otityjdjnzy5ody0ntl5x3dpdg25cmf3ln2t3a99.0ilfzr")) returned 0xffffffff [0113.748] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x88, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 0x7d2918 [0113.748] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x88, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 0 [0113.748] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0113.748] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml")) returned 1 [0113.749] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml")) returned 0xffffffff [0113.749] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 0 [0113.749] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0113.749] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35623864, dwReserved1=0x31302d64, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0113.749] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d3018 [0113.749] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.749] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.749] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0113.749] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35623864, dwReserved1=0x31302d64, cFileName="TenantStorage", cAlternateFileName="TENANT~1")) returned 1 [0113.749] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2a58 [0113.750] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.750] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0113.750] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x40221d, ftCreationTime.dwLowDateTime=0x1, ftCreationTime.dwHighDateTime=0x77c29fd0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x77bd6bd8, ftLastWriteTime.dwLowDateTime=0x7c0000, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x7c6530, nFileSizeLow=0x1, dwReserved0=0x77bf08a7, dwReserved1=0x201, cFileName="", cAlternateFileName="X*}")) returned 0xffffffff [0113.751] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 0 [0113.751] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0113.751] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35414952, dwReserved1=0x31302d64, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 1 [0113.751] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vortexschemarequests.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0113.752] CloseHandle (hObject=0xffffffff) returned 1 [0113.752] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vortexschemarequests.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Vm9ydGV4U2NoZW12UmV4dWVzdHM6ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vm9ydgv4u2nozw12umv4dwvzdhm6zgf0.0ilfzr")) returned 0 [0113.752] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Vm9ydGV4U2NoZW12UmV4dWVzdHM6ZGF0.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vm9ydgv4u2nozw12umv4dwvzdhm6zgf0.0ilfzr")) returned 0xffffffff [0113.752] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 0x7d2f58 [0113.752] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 0 [0113.752] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.752] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vortexschemarequests.dat")) returned 1 [0113.753] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vortexschemarequests.dat")) returned 0xffffffff [0113.753] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x35414952, dwReserved1=0x31302d64, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 0 [0113.753] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0113.753] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53786574, dwReserved1=0x6d656863, cFileName="DRM", cAlternateFileName="")) returned 1 [0113.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0113.753] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.753] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0113.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0113.753] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="..", cAlternateFileName="")) returned 1 [0113.753] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="..", cAlternateFileName="")) returned 0 [0113.754] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.754] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0113.754] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0113.754] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0x40368daa, ftLastWriteTime.dwHighDateTime=0x1d39f5f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53726576, dwReserved1=0x6d656863, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0113.754] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0113.755] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.755] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0113.755] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0113.755] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="..", cAlternateFileName="")) returned 1 [0113.755] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0113.755] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0113.755] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.755] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0113.755] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0113.755] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0113.755] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0113.759] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0113.760] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0113.760] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x53727377, dwReserved1=0x6d656863, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0113.760] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6163696c, dwReserved1=0x6e6f6974, cFileName=".", cAlternateFileName="")) returned 0x7d2c98 [0113.760] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6163696c, dwReserved1=0x6e6f6974, cFileName="..", cAlternateFileName="")) returned 1 [0113.760] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6163696c, dwReserved1=0x6e6f6974, cFileName="INT", cAlternateFileName="")) returned 1 [0113.760] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName=".", cAlternateFileName="")) returned 0x7d2a18 [0113.760] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="..", cAlternateFileName="")) returned 1 [0113.760] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0113.760] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0113.761] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\cHBjcm4j325m1Wc2MDA6ZG4s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\chbjcm4j325m1wc2mda6zg4s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0113.761] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x62e0 [0113.761] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0113.762] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0113.842] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x62e0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x62e0, lpOverlapped=0x0) returned 1 [0113.845] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x62f0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x62f0, lpOverlapped=0x0) returned 1 [0113.846] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0113.869] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0113.882] CloseHandle (hObject=0x208) returned 1 [0113.883] CloseHandle (hObject=0x204) returned 1 [0113.884] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\cHBjcm4j325m1Wc2MDA6ZG4s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\chbjcm4j325m1wc2mda6zg4s.0ilfzr")) returned 0 [0113.885] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\cHBjcm4j325m1Wc2MDA6ZG4s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\chbjcm4j325m1wc2mda6zg4s.0ilfzr")) returned 0x20 [0113.885] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0x7d2ad8 [0113.885] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x7c8478, dwReserved1=0x7c8f70, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0113.885] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0113.885] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll")) returned 1 [0113.886] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\ppcrlconfig600.dll")) returned 0xffffffff [0113.886] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x20200, dwReserved1=0x6, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0113.886] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0113.886] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c72, dwReserved1=0x6769666e, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0113.887] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0113.887] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.887] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0113.887] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0113.887] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\cHBjcm4j325m1Wc2MDA6ZG4s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\chbjcm4j325m1wc2mda6zg4s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0113.889] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x60e0 [0113.889] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0113.889] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0113.965] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x60e0, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x60e0, lpOverlapped=0x0) returned 1 [0113.969] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x60f0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x60f0, lpOverlapped=0x0) returned 1 [0113.970] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0113.993] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.005] CloseHandle (hObject=0x204) returned 1 [0114.005] CloseHandle (hObject=0x208) returned 1 [0114.006] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\cHBjcm4j325m1Wc2MDA6ZG4s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\chbjcm4j325m1wc2mda6zg4s.0ilfzr")) returned 0 [0114.007] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\cHBjcm4j325m1Wc2MDA6ZG4s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\chbjcm4j325m1wc2mda6zg4s.0ilfzr")) returned 0x20 [0114.007] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x5c, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0x7d3098 [0114.007] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x5c, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0114.007] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0114.007] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll")) returned 1 [0114.009] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\ppcrlconfig600.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\ppcrlconfig600.dll")) returned 0xffffffff [0114.009] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce358, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0114.009] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce350, dwReserved1=0x46, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0114.009] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce350, dwReserved1=0x46, cFileName="..", cAlternateFileName="")) returned 1 [0114.009] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce350, dwReserved1=0x46, cFileName="..", cAlternateFileName="")) returned 0 [0114.009] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0114.009] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x7ce358, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0 [0114.009] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0114.009] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c72, dwReserved1=0x6769666e, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0114.009] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0114.009] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74637564, dwReserved1=0x6d6e6f69, cFileName="MapData", cAlternateFileName="")) returned 1 [0114.009] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c70, dwReserved1=0x6769666e, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0114.010] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c70, dwReserved1=0x6769666e, cFileName="..", cAlternateFileName="")) returned 1 [0114.010] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c70, dwReserved1=0x6769666e, cFileName="..", cAlternateFileName="")) returned 0 [0114.010] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0114.010] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x74637564, dwReserved1=0x6d6e6f69, cFileName="MF", cAlternateFileName="")) returned 1 [0114.010] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c70, dwReserved1=0x6769666e, cFileName=".", cAlternateFileName="")) returned 0x7d2958 [0114.010] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f636c70, dwReserved1=0x6769666e, cFileName="..", cAlternateFileName="")) returned 1 [0114.010] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x6f636c70, dwReserved1=0x6769666e, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0114.010] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0114.011] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\QWN01XZlL5dSTA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\mf\\qwn01xzll5dsta99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0114.011] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a7c [0114.011] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0114.011] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0114.121] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19f22c*=0x3a7c, lpOverlapped=0x0) returned 1 [0114.123] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19f22c*=0x3a80, lpOverlapped=0x0) returned 1 [0114.124] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0114.148] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.165] CloseHandle (hObject=0x200) returned 1 [0114.165] CloseHandle (hObject=0x208) returned 1 [0114.167] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\QWN01XZlL5dSTA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\mf\\qwn01xzll5dsta99.0ilfzr")) returned 0 [0114.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\QWN01XZlL5dSTA99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\mf\\qwn01xzll5dsta99.0ilfzr")) returned 0x20 [0114.167] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x7e5b88, dwReserved1=0x7eb390, cFileName="Active.GRL", cAlternateFileName="")) returned 0x7d2918 [0114.167] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x7e5b88, dwReserved1=0x7eb390, cFileName="Active.GRL", cAlternateFileName="")) returned 0 [0114.167] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0114.168] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl")) returned 1 [0114.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl")) returned 0xffffffff [0114.169] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0114.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0114.171] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\UGV6ZGl6Zy5HU5w9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\mf\\ugv6zgl6zy5hu5w9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0114.171] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a7c [0114.171] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0114.172] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0114.240] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3a7c, lpNumberOfBytesRead=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19f22c*=0x3a7c, lpOverlapped=0x0) returned 1 [0114.271] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a80, lpNumberOfBytesWritten=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19f22c*=0x3a80, lpOverlapped=0x0) returned 1 [0114.272] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0114.296] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.307] CloseHandle (hObject=0x208) returned 1 [0114.307] CloseHandle (hObject=0x200) returned 1 [0114.308] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\UGV6ZGl6Zy5HU5w9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\mf\\ugv6zgl6zy5hu5w9.0ilfzr")) returned 0 [0114.331] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\UGV6ZGl6Zy5HU5w9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\mf\\ugv6zgl6zy5hu5w9.0ilfzr")) returned 0x20 [0114.331] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x7e5b88, dwReserved1=0x7eb390, cFileName="Pending.GRL", cAlternateFileName="")) returned 0x7d2c98 [0114.331] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x7e5b88, dwReserved1=0x7eb390, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0114.331] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0114.331] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl")) returned 1 [0114.332] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl")) returned 0xffffffff [0114.332] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0114.332] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0114.333] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x676e6964, dwReserved1=0x4c52472e, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0114.333] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2c98 [0114.333] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.333] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0114.333] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName=".", cAlternateFileName="")) returned 0x7d3098 [0114.333] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="..", cAlternateFileName="")) returned 1 [0114.333] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="..", cAlternateFileName="")) returned 0 [0114.333] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0114.333] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0114.333] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0114.333] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x72636461, dwReserved1=0x53626d75, cFileName="Network", cAlternateFileName="")) returned 1 [0114.333] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0114.334] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.334] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0114.334] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0114.334] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="..", cAlternateFileName="")) returned 1 [0114.334] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="Cm", cAlternateFileName="")) returned 1 [0114.334] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d3018 [0114.335] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.335] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.335] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0114.335] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="CM_old", cAlternateFileName="")) returned 1 [0114.335] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0114.337] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.337] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0114.337] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0114.337] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="CM_old", cAlternateFileName="")) returned 0 [0114.337] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0114.337] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x646c6f, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0114.337] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName=".", cAlternateFileName="")) returned 0x7d2ad8 [0114.337] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="..", cAlternateFileName="")) returned 1 [0114.338] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x35dd5d59, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x201ec, dwReserved1=0xf, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0114.338] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0114.338] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRiLmNo1w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwrilmno1w99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0114.338] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2000 [0114.338] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0114.339] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0114.483] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x2000, lpOverlapped=0x0) returned 1 [0114.484] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2010, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x2010, lpOverlapped=0x0) returned 1 [0114.485] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0114.663] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.685] CloseHandle (hObject=0x208) returned 1 [0114.685] CloseHandle (hObject=0x204) returned 1 [0114.686] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.chk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRiLmNo1w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwrilmno1w99.0ilfzr")) returned 0 [0114.687] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRiLmNo1w99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwrilmno1w99.0ilfzr")) returned 0x20 [0114.687] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.chk", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x35dd5d59, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="edb.chk", cAlternateFileName="")) returned 0x7d2c18 [0114.687] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x35dd5d59, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="edb.chk", cAlternateFileName="")) returned 0 [0114.687] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0114.687] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.chk")) returned 1 [0114.688] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.chk")) returned 0xffffffff [0114.688] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0114.689] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0114.689] CloseHandle (hObject=0xffffffff) returned 1 [0114.689] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRiLm4vZw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwrilm4vzw99.0ilfzr")) returned 0 [0114.689] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRiLm4vZw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwrilm4vzw99.0ilfzr")) returned 0xffffffff [0114.689] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="edb.log", cAlternateFileName="")) returned 0x7d2a58 [0114.689] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="edb.log", cAlternateFileName="")) returned 0 [0114.689] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0114.689] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.log")) returned 0 [0114.689] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.log")) returned 0x20 [0114.689] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0114.690] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00001.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00001.jrs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0114.690] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRicmVzMDAwMDE61nJz.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwricmvzmdawmde61njz.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0114.690] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x140000 [0114.690] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0114.691] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0114.777] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x140000, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x140000, lpOverlapped=0x0) returned 1 [0114.863] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x140010, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x140010, lpOverlapped=0x0) returned 1 [0114.890] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0114.919] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0114.934] CloseHandle (hObject=0x204) returned 1 [0114.934] CloseHandle (hObject=0x208) returned 1 [0114.968] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00001.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00001.jrs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRicmVzMDAwMDE61nJz.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwricmvzmdawmde61njz.0ilfzr")) returned 0 [0114.969] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRicmVzMDAwMDE61nJz.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwricmvzmdawmde61njz.0ilfzr")) returned 0x20 [0114.969] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00001.jrs", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 0x7d2b18 [0114.969] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 0 [0114.970] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0114.970] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00001.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00001.jrs")) returned 1 [0114.973] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00001.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00001.jrs")) returned 0xffffffff [0114.973] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0114.973] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00002.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00002.jrs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0114.973] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRicmVzMDAwMDI61nJz.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwricmvzmdawmdi61njz.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0114.974] GetFileSize (in: hFile=0x208, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x140000 [0114.974] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0114.974] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0115.098] ReadFile (in: hFile=0x208, lpBuffer=0x238000e, nNumberOfBytesToRead=0x140000, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x140000, lpOverlapped=0x0) returned 1 [0115.203] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x140010, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x140010, lpOverlapped=0x0) returned 1 [0115.244] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0115.268] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.327] CloseHandle (hObject=0x208) returned 1 [0115.327] CloseHandle (hObject=0x204) returned 1 [0115.354] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00002.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00002.jrs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRicmVzMDAwMDI61nJz.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwricmvzmdawmdi61njz.0ilfzr")) returned 0 [0115.355] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRicmVzMDAwMDI61nJz.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwricmvzmdawmdi61njz.0ilfzr")) returned 0x20 [0115.355] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00002.jrs", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 0x7d2fd8 [0115.355] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 0 [0115.355] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0115.355] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00002.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00002.jrs")) returned 1 [0115.358] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbres00002.jrs" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbres00002.jrs")) returned 0xffffffff [0115.358] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0115.358] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbtmp.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0115.359] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRidG1wLm4vZw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwridg1wlm4vzw99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0115.359] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x140000 [0115.359] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0115.359] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0115.667] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x140000, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x140000, lpOverlapped=0x0) returned 1 [0115.761] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x140010, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x140010, lpOverlapped=0x0) returned 1 [0115.817] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0115.848] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.860] CloseHandle (hObject=0x204) returned 1 [0115.860] CloseHandle (hObject=0x208) returned 1 [0115.887] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbtmp.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRidG1wLm4vZw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwridg1wlm4vzw99.0ilfzr")) returned 0 [0115.889] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\ZWRidG1wLm4vZw99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\zwridg1wlm4vzw99.0ilfzr")) returned 0x20 [0115.889] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x7e5bd8, dwReserved1=0x7e8378, cFileName="edbtmp.log", cAlternateFileName="")) returned 0x7d2b98 [0115.890] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x7e5bd8, dwReserved1=0x7e8378, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0115.890] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0115.890] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbtmp.log")) returned 1 [0115.892] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edbtmp.log")) returned 0xffffffff [0115.892] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2d8781e6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.db", cAlternateFileName="")) returned 1 [0115.893] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.db"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.893] CloseHandle (hObject=0xffffffff) returned 1 [0115.893] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\cW1nci55Yg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\cw1nci55yg99.0ilfzr")) returned 0 [0115.893] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\cW1nci55Yg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\cw1nci55yg99.0ilfzr")) returned 0xffffffff [0115.893] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2d8781e6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="qmgr.db", cAlternateFileName="")) returned 0x7d2fd8 [0115.893] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2d8781e6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="qmgr.db", cAlternateFileName="")) returned 0 [0115.893] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0115.893] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.db")) returned 0 [0115.893] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.db")) returned 0x220 [0115.894] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 1 [0115.894] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.jfm" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.jfm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.894] CloseHandle (hObject=0xffffffff) returned 1 [0115.894] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.jfm" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.jfm"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\cW1nci5qZm09.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\cw1nci5qzm09.0ilfzr")) returned 0 [0115.894] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\cW1nci5qZm09.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\cw1nci5qzm09.0ilfzr")) returned 0xffffffff [0115.894] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.jfm", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="qmgr.jfm", cAlternateFileName="")) returned 0x7d2b58 [0115.894] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="qmgr.jfm", cAlternateFileName="")) returned 0 [0115.894] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0115.894] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.jfm" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.jfm")) returned 0 [0115.894] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.jfm" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.jfm")) returned 0x20 [0115.894] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 0 [0115.895] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0115.895] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x646c6f, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0115.895] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0115.895] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x616f6c6e, dwReserved1=0x73726564, cFileName="Office", cAlternateFileName="")) returned 1 [0115.895] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x666a2e72, dwReserved1=0x32676f6d, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0115.895] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x666a2e72, dwReserved1=0x32676f6d, cFileName="..", cAlternateFileName="")) returned 1 [0115.895] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x666a2e72, dwReserved1=0x32676f6d, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0115.895] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x666a2e72, dwReserved1=0x32676f6d, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 0 [0115.895] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0115.895] FindNextFileA (in: hFindFile=0x7d2f18, lpFindFileData=0x19f71c | out: lpFindFileData=0x19f71c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x6f546b63, dwReserved1=0x506e7552, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0115.895] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*.*", lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610070, dwReserved1=0x6b0063, cFileName=".", cAlternateFileName="")) returned 0x7d2d18 [0115.897] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x610070, dwReserved1=0x6b0063, cFileName="..", cAlternateFileName="")) returned 1 [0115.898] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x610070, dwReserved1=0x6b0063, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0115.898] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0115.899] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\Y2913nRy7XR2Ym4lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\y2913nry7xr2ym4lln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x208 [0115.900] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x70bb [0115.900] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0115.900] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0116.000] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x70bb, lpNumberOfBytesRead=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19f22c*=0x70bb, lpOverlapped=0x0) returned 1 [0116.013] WriteFile (in: hFile=0x208, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x70c0, lpNumberOfBytesWritten=0x19f22c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19f22c*=0x70c0, lpOverlapped=0x0) returned 1 [0116.015] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0116.038] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.049] CloseHandle (hObject=0x200) returned 1 [0116.050] CloseHandle (hObject=0x208) returned 1 [0116.051] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\Y2913nRy7XR2Ym4lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\y2913nry7xr2ym4lln2t3a99.0ilfzr")) returned 0 [0116.052] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\Y2913nRy7XR2Ym4lLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\y2913nry7xr2ym4lln2t3a99.0ilfzr")) returned 0x20 [0116.052] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="countrytable.xml", cAlternateFileName="")) returned 0x7d2cd8 [0116.052] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19f128 | out: lpFindFileData=0x19f128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x7c8680, dwReserved1=0x7dc318, cFileName="countrytable.xml", cAlternateFileName="")) returned 0 [0116.052] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0116.052] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml")) returned 1 [0116.052] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml")) returned 0xffffffff [0116.052] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0116.052] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201fc, dwReserved1=0xc, cFileName=".", cAlternateFileName="")) returned 0x7d2b58 [0116.070] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x201fc, dwReserved1=0xc, cFileName="..", cAlternateFileName="")) returned 1 [0116.070] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x201fc, dwReserved1=0xc, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0116.070] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0116.070] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0116.074] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x98c [0116.074] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0116.074] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0116.177] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x98c, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x98c, lpOverlapped=0x0) returned 1 [0116.179] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x990, lpOverlapped=0x0) returned 1 [0116.180] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0116.206] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.219] CloseHandle (hObject=0x200) returned 1 [0116.219] CloseHandle (hObject=0x204) returned 1 [0116.220] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0116.220] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0116.221] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2c98 [0116.221] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0116.221] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0116.221] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml")) returned 1 [0116.222] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml")) returned 0xffffffff [0116.222] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0116.222] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0116.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0116.223] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0116.223] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0116.224] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0116.292] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0116.293] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0116.294] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0116.325] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.336] CloseHandle (hObject=0x204) returned 1 [0116.336] CloseHandle (hObject=0x200) returned 1 [0116.337] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0116.338] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0116.338] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2f58 [0116.338] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0116.338] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0116.338] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml")) returned 1 [0116.339] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml")) returned 0xffffffff [0116.339] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0116.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xa, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0116.340] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xa, cFileName="..", cAlternateFileName="")) returned 1 [0116.340] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xa, cFileName="RunTime", cAlternateFileName="")) returned 1 [0116.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2b98 [0116.340] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0116.340] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0116.340] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0116.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0116.341] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x71e [0116.341] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0116.342] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0116.444] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x71e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x71e, lpOverlapped=0x0) returned 1 [0116.452] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x730, lpOverlapped=0x0) returned 1 [0116.453] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0116.476] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.487] CloseHandle (hObject=0x1f8) returned 1 [0116.488] CloseHandle (hObject=0x1fc) returned 1 [0116.489] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0116.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0116.489] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0x7d3098 [0116.489] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0116.490] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0116.490] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0116.491] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0116.491] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0116.491] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0116.491] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0116.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0116.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0116.492] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x243 [0116.492] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0116.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0116.606] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x243, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x243, lpOverlapped=0x0) returned 1 [0116.607] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x250, lpOverlapped=0x0) returned 1 [0116.608] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0116.632] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.657] CloseHandle (hObject=0x204) returned 1 [0116.657] CloseHandle (hObject=0x1fc) returned 1 [0116.658] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0116.659] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0116.659] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2918 [0116.659] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0116.659] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0116.659] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml")) returned 1 [0116.660] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml")) returned 0xffffffff [0116.660] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0116.660] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0116.661] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0116.661] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0116.661] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0116.661] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2b58 [0116.662] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0116.662] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0116.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0116.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0116.664] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x504 [0116.664] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0116.664] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0116.742] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x504, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x504, lpOverlapped=0x0) returned 1 [0116.744] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x510, lpOverlapped=0x0) returned 1 [0116.745] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0116.768] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.781] CloseHandle (hObject=0x200) returned 1 [0116.781] CloseHandle (hObject=0x1fc) returned 1 [0116.782] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0116.783] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0116.783] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2a58 [0116.783] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0116.783] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0116.783] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml")) returned 1 [0116.784] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml")) returned 0xffffffff [0116.784] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0116.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0116.785] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0116.785] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0116.785] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0116.785] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.024] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0117.025] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0117.026] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0117.049] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.067] CloseHandle (hObject=0x1fc) returned 1 [0117.067] CloseHandle (hObject=0x200) returned 1 [0117.068] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0117.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0117.069] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2f58 [0117.069] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0117.069] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0117.069] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml")) returned 1 [0117.070] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml")) returned 0xffffffff [0117.070] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0117.070] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xc, cFileName=".", cAlternateFileName="")) returned 0x7d3098 [0117.071] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xc, cFileName="..", cAlternateFileName="")) returned 1 [0117.071] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xc, cFileName="RunTime", cAlternateFileName="")) returned 1 [0117.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0117.071] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0117.071] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0117.071] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\0__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\0__power_controls.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0117.071] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\MF9fUG93ZXJfQ296dHJv3HM6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\mf9fug93zxjfq296dhjv3hm6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0117.072] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x168 [0117.072] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0117.073] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.142] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x168, lpOverlapped=0x0) returned 1 [0117.149] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x170, lpOverlapped=0x0) returned 1 [0117.150] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0117.175] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.186] CloseHandle (hObject=0x204) returned 1 [0117.187] CloseHandle (hObject=0x1f8) returned 1 [0117.188] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\0__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\0__power_controls.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\MF9fUG93ZXJfQ296dHJv3HM6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\mf9fug93zxjfq296dhjv3hm6chjvdn2t3a99.0ilfzr")) returned 0 [0117.188] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\MF9fUG93ZXJfQ296dHJv3HM6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\mf9fug93zxjfq296dhjv3hm6chjvdn2t3a99.0ilfzr")) returned 0x20 [0117.188] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\0__Power_Controls.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 0x7d2f58 [0117.188] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 0 [0117.188] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0117.188] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\0__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\0__power_controls.provxml")) returned 1 [0117.189] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\0__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\0__power_controls.provxml")) returned 0xffffffff [0117.189] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0117.190] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\1__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\1__power_controls.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0117.207] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\MV9fUG93ZXJfQ296dHJv3HM6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\mv9fug93zxjfq296dhjv3hm6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0117.209] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x168 [0117.209] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0117.210] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.284] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x168, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x168, lpOverlapped=0x0) returned 1 [0117.285] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x170, lpOverlapped=0x0) returned 1 [0117.286] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0117.316] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.328] CloseHandle (hObject=0x1f8) returned 1 [0117.328] CloseHandle (hObject=0x204) returned 1 [0117.329] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\1__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\1__power_controls.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\MV9fUG93ZXJfQ296dHJv3HM6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\mv9fug93zxjfq296dhjv3hm6chjvdn2t3a99.0ilfzr")) returned 0 [0117.330] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\MV9fUG93ZXJfQ296dHJv3HM6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\mv9fug93zxjfq296dhjv3hm6chjvdn2t3a99.0ilfzr")) returned 0x20 [0117.330] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\1__Power_Controls.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 0x7d2f58 [0117.330] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 0 [0117.330] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0117.330] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\1__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\1__power_controls.provxml")) returned 1 [0117.331] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\1__Power_Controls.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\1__power_controls.provxml")) returned 0xffffffff [0117.331] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 0 [0117.331] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0117.331] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x65776f50, dwReserved1=0x6f435f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0117.331] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0117.332] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0117.332] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ab [0117.332] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0117.332] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.450] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1ab, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1ab, lpOverlapped=0x0) returned 1 [0117.451] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1b0, lpOverlapped=0x0) returned 1 [0117.452] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0117.479] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.491] CloseHandle (hObject=0x1fc) returned 1 [0117.491] CloseHandle (hObject=0x204) returned 1 [0117.492] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0117.493] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0117.493] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d29d8 [0117.493] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0117.493] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0117.493] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml")) returned 1 [0117.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml")) returned 0xffffffff [0117.494] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x65776f50, dwReserved1=0x6f435f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0117.494] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0117.495] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0117.495] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0117.495] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0117.495] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2a18 [0117.495] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0117.495] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0117.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0117.496] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0117.498] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcb9 [0117.498] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0117.498] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.615] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcb9, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0xcb9, lpOverlapped=0x0) returned 1 [0117.617] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0xcc0, lpOverlapped=0x0) returned 1 [0117.618] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0117.641] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.652] CloseHandle (hObject=0x200) returned 1 [0117.652] CloseHandle (hObject=0x204) returned 1 [0117.654] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0117.654] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0117.654] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2b58 [0117.654] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0117.654] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0117.655] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml")) returned 1 [0117.658] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml")) returned 0xffffffff [0117.658] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0117.658] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0117.658] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0117.659] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0117.659] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0117.659] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.732] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0117.733] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0117.734] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0117.769] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.780] CloseHandle (hObject=0x204) returned 1 [0117.780] CloseHandle (hObject=0x200) returned 1 [0117.782] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0117.782] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0117.782] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2958 [0117.783] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0117.783] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0117.783] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml")) returned 1 [0117.784] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml")) returned 0xffffffff [0117.784] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0117.784] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x7d2a58 [0117.784] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0117.784] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x3, cFileName="RunTime", cAlternateFileName="")) returned 1 [0117.784] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0117.784] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0117.784] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0117.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0117.785] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0117.785] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcdd [0117.785] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0117.786] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0117.976] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcdd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0xcdd, lpOverlapped=0x0) returned 1 [0117.977] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xce0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0xce0, lpOverlapped=0x0) returned 1 [0117.982] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0118.040] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.051] CloseHandle (hObject=0x1fc) returned 1 [0118.052] CloseHandle (hObject=0x1f8) returned 1 [0118.053] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0118.053] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0118.053] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0x7d2fd8 [0118.054] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0118.054] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0118.054] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0118.055] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0118.055] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0118.055] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0118.055] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.055] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0118.055] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0118.056] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfb [0118.056] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0118.056] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0118.236] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xfb, lpOverlapped=0x0) returned 1 [0118.237] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x100, lpOverlapped=0x0) returned 1 [0118.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0118.261] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.273] CloseHandle (hObject=0x204) returned 1 [0118.273] CloseHandle (hObject=0x1f8) returned 1 [0118.275] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0118.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0118.275] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2b18 [0118.275] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0118.275] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0118.276] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml")) returned 1 [0118.276] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml")) returned 0xffffffff [0118.277] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0118.277] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0118.277] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0118.277] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0118.277] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0118.277] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2b58 [0118.277] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0118.277] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0118.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0118.278] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0118.319] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x65f [0118.319] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0118.320] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0118.477] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x65f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x65f, lpOverlapped=0x0) returned 1 [0118.481] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x670, lpOverlapped=0x0) returned 1 [0118.482] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0118.557] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.576] CloseHandle (hObject=0x200) returned 1 [0118.577] CloseHandle (hObject=0x1f8) returned 1 [0118.578] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0118.578] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0118.579] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2a18 [0118.579] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0118.579] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0118.579] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml")) returned 1 [0118.580] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml")) returned 0xffffffff [0118.580] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0118.580] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0118.580] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0118.581] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0118.581] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0118.581] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0118.666] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0118.684] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0118.685] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0118.708] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.748] CloseHandle (hObject=0x1f8) returned 1 [0118.748] CloseHandle (hObject=0x200) returned 1 [0118.751] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0118.751] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0118.751] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2f58 [0118.751] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0118.751] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0118.752] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml")) returned 1 [0118.753] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml")) returned 0xffffffff [0118.753] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0118.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x9, cFileName=".", cAlternateFileName="")) returned 0x7d2d58 [0118.753] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x9, cFileName="..", cAlternateFileName="")) returned 1 [0118.753] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x9, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.753] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0118.754] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0118.754] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0118.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0118.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0118.754] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a7 [0118.754] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0118.756] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0118.825] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3a7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x3a7, lpOverlapped=0x0) returned 1 [0118.829] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3b0, lpOverlapped=0x0) returned 1 [0118.830] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0118.854] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.866] CloseHandle (hObject=0x204) returned 1 [0118.866] CloseHandle (hObject=0x1fc) returned 1 [0118.867] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0118.868] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0118.868] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0x7d2f58 [0118.868] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0118.868] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0118.868] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0118.869] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0118.869] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0118.869] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0118.870] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.870] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0118.870] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0118.870] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ac [0118.870] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0118.871] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0118.982] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1ac, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1ac, lpOverlapped=0x0) returned 1 [0118.983] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1b0, lpOverlapped=0x0) returned 1 [0118.984] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0119.010] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.021] CloseHandle (hObject=0x1f8) returned 1 [0119.021] CloseHandle (hObject=0x1fc) returned 1 [0119.023] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0119.024] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0119.024] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d3098 [0119.024] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0119.024] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0119.024] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml")) returned 1 [0119.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml")) returned 0xffffffff [0119.025] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0119.025] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0119.025] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0119.025] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0119.025] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0119.025] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2a58 [0119.026] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0119.026] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0119.026] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0119.027] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0119.028] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x59f [0119.028] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0119.028] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0119.148] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x59f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x59f, lpOverlapped=0x0) returned 1 [0119.160] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x5b0, lpOverlapped=0x0) returned 1 [0119.161] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0119.184] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.208] CloseHandle (hObject=0x200) returned 1 [0119.209] CloseHandle (hObject=0x1fc) returned 1 [0119.211] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0119.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0119.211] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2998 [0119.212] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0119.212] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0119.212] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml")) returned 1 [0119.213] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml")) returned 0xffffffff [0119.213] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0119.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0119.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0119.213] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0119.214] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0119.214] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0119.381] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0119.382] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0119.383] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0119.410] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.421] CloseHandle (hObject=0x1fc) returned 1 [0119.422] CloseHandle (hObject=0x200) returned 1 [0119.423] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0119.424] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0119.424] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d3098 [0119.424] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0119.424] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0119.424] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml")) returned 1 [0119.425] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml")) returned 0xffffffff [0119.425] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0119.425] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x3, cFileName=".", cAlternateFileName="")) returned 0x7d2c98 [0119.426] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x3, cFileName="..", cAlternateFileName="")) returned 1 [0119.426] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x3, cFileName="RunTime", cAlternateFileName="")) returned 1 [0119.426] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2cd8 [0119.426] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0119.426] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0119.426] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0119.427] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0119.427] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0119.427] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0119.428] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0119.579] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0119.591] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0119.592] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0119.636] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.647] CloseHandle (hObject=0x1f8) returned 1 [0119.647] CloseHandle (hObject=0x204) returned 1 [0119.648] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0119.649] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0119.649] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0x7d2f58 [0119.649] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0119.649] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0119.649] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0119.650] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0119.650] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0119.650] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0119.651] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0119.651] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0119.651] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0119.651] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfb [0119.651] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0119.652] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0119.721] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xfb, lpOverlapped=0x0) returned 1 [0119.722] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x100, lpOverlapped=0x0) returned 1 [0119.723] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0119.747] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.758] CloseHandle (hObject=0x1fc) returned 1 [0119.758] CloseHandle (hObject=0x204) returned 1 [0119.759] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0119.759] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0119.759] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2b58 [0119.760] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0119.760] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0119.760] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml")) returned 1 [0119.761] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml")) returned 0xffffffff [0119.761] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0119.761] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0119.761] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0119.761] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0119.761] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0119.761] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0119.763] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0119.764] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0119.764] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0119.764] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0119.765] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1144 [0119.765] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0119.765] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0119.835] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1144, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1144, lpOverlapped=0x0) returned 1 [0119.837] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1150, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1150, lpOverlapped=0x0) returned 1 [0119.838] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0119.862] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.873] CloseHandle (hObject=0x200) returned 1 [0119.874] CloseHandle (hObject=0x204) returned 1 [0119.876] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0119.877] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0119.877] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 0x7d2d58 [0119.877] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 0 [0119.877] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0119.877] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml")) returned 1 [0119.878] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml")) returned 0xffffffff [0119.878] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0119.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0119.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0119.879] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0119.879] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0119.879] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0119.988] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0119.992] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0119.993] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.017] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.028] CloseHandle (hObject=0x204) returned 1 [0120.028] CloseHandle (hObject=0x200) returned 1 [0120.029] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0120.031] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0120.033] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2cd8 [0120.033] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0120.033] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0120.033] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml")) returned 1 [0120.034] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml")) returned 0xffffffff [0120.034] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0120.034] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xc, cFileName=".", cAlternateFileName="")) returned 0x7d2958 [0120.034] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xc, cFileName="..", cAlternateFileName="")) returned 1 [0120.035] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xc, cFileName="RunTime", cAlternateFileName="")) returned 1 [0120.035] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0120.035] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0120.035] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0120.035] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0120.035] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0120.037] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x720 [0120.037] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.037] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0120.104] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x720, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x720, lpOverlapped=0x0) returned 1 [0120.105] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x730, lpOverlapped=0x0) returned 1 [0120.106] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.131] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.142] CloseHandle (hObject=0x1fc) returned 1 [0120.142] CloseHandle (hObject=0x1f8) returned 1 [0120.143] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0120.144] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0120.144] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0x7d2b18 [0120.144] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0 [0120.144] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0120.144] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0120.145] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0120.145] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0120.146] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\1__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0120.146] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\MV9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\mv9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0120.146] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x905 [0120.146] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.146] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0120.213] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x905, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x905, lpOverlapped=0x0) returned 1 [0120.217] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x910, lpOverlapped=0x0) returned 1 [0120.218] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.241] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.254] CloseHandle (hObject=0x1f8) returned 1 [0120.254] CloseHandle (hObject=0x1fc) returned 1 [0120.255] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\1__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\MV9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\mv9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0120.256] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\MV9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\mv9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0120.256] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\1__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x90, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 0x7d2918 [0120.256] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x90, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 0 [0120.256] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0120.256] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\1__power_policy.provxml")) returned 1 [0120.257] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\1__power_policy.provxml")) returned 0xffffffff [0120.257] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 0 [0120.257] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0120.257] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0120.257] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0120.258] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0120.258] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x257 [0120.258] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.258] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0120.357] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x257, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x257, lpOverlapped=0x0) returned 1 [0120.359] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x260, lpOverlapped=0x0) returned 1 [0120.360] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.383] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.395] CloseHandle (hObject=0x204) returned 1 [0120.395] CloseHandle (hObject=0x1fc) returned 1 [0120.397] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0120.397] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0120.397] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2c58 [0120.397] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0120.398] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0120.398] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml")) returned 1 [0120.399] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml")) returned 0xffffffff [0120.399] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0120.399] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0120.399] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0120.399] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0120.399] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0120.399] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2958 [0120.399] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0120.399] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0120.399] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0120.400] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0120.402] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13d8 [0120.402] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.402] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0120.642] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x13d8, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x13d8, lpOverlapped=0x0) returned 1 [0120.648] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x13e0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x13e0, lpOverlapped=0x0) returned 1 [0120.649] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.673] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.684] CloseHandle (hObject=0x200) returned 1 [0120.684] CloseHandle (hObject=0x1fc) returned 1 [0120.685] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0120.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0120.686] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2c18 [0120.686] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0120.686] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0120.686] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml")) returned 1 [0120.690] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml")) returned 0xffffffff [0120.690] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0120.690] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0120.690] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0120.691] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0120.691] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.691] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0120.761] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0120.762] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0120.763] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.808] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.819] CloseHandle (hObject=0x1fc) returned 1 [0120.819] CloseHandle (hObject=0x200) returned 1 [0120.820] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0120.821] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0120.821] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2a58 [0120.821] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0120.821] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0120.821] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml")) returned 1 [0120.822] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml")) returned 0xffffffff [0120.822] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0120.822] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x5, cFileName=".", cAlternateFileName="")) returned 0x7d3018 [0120.823] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x5, cFileName="..", cAlternateFileName="")) returned 1 [0120.823] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x5, cFileName="RunTime", cAlternateFileName="")) returned 1 [0120.823] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2b98 [0120.823] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0120.823] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f405fa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f405fa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0120.823] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0120.823] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0120.824] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcec [0120.824] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.824] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0120.923] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0xcec, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0xcec, lpOverlapped=0x0) returned 1 [0120.925] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0xcf0, lpOverlapped=0x0) returned 1 [0120.926] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0120.949] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.962] CloseHandle (hObject=0x204) returned 1 [0120.962] CloseHandle (hObject=0x1f8) returned 1 [0120.964] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0120.964] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0120.964] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f405fa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f405fa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0x7d29d8 [0120.964] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f405fa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f405fa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0120.964] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0120.964] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0120.965] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0120.966] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0120.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\1__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0120.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\MV9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\mv9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0120.966] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x716 [0120.966] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0120.967] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.068] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x716, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x716, lpOverlapped=0x0) returned 1 [0121.070] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x720, lpOverlapped=0x0) returned 1 [0121.071] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.095] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.106] CloseHandle (hObject=0x1f8) returned 1 [0121.106] CloseHandle (hObject=0x204) returned 1 [0121.108] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\1__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\MV9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\mv9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0121.108] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\MV9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\mv9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0121.108] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\1__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x90, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 0x7d2b58 [0121.108] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x90, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0121.108] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0121.108] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\1__power_policy.provxml")) returned 1 [0121.112] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\1__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\1__power_policy.provxml")) returned 0xffffffff [0121.113] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x7c0598, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0121.113] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0121.113] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0121.113] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0121.113] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0121.113] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23f [0121.113] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.114] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.191] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x23f, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x23f, lpOverlapped=0x0) returned 1 [0121.192] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x250, lpOverlapped=0x0) returned 1 [0121.193] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.217] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.228] CloseHandle (hObject=0x1fc) returned 1 [0121.228] CloseHandle (hObject=0x204) returned 1 [0121.230] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0121.230] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0121.231] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2b18 [0121.231] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0121.231] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0121.231] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml")) returned 1 [0121.232] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml")) returned 0xffffffff [0121.232] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0121.232] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0121.232] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0121.232] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0121.232] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0121.232] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d3018 [0121.233] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0121.233] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0121.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0121.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0121.236] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34d [0121.236] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.236] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.303] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34d, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x34d, lpOverlapped=0x0) returned 1 [0121.305] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x350, lpOverlapped=0x0) returned 1 [0121.306] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.329] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.340] CloseHandle (hObject=0x200) returned 1 [0121.340] CloseHandle (hObject=0x204) returned 1 [0121.341] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0121.342] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0121.342] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d3098 [0121.342] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0121.342] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0121.342] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml")) returned 1 [0121.343] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml")) returned 0xffffffff [0121.343] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0121.343] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0121.346] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0121.346] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0121.346] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.347] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.447] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0121.448] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0121.449] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.472] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.483] CloseHandle (hObject=0x204) returned 1 [0121.483] CloseHandle (hObject=0x200) returned 1 [0121.484] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0121.485] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0121.486] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2d58 [0121.486] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0121.486] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0121.486] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml")) returned 1 [0121.487] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml")) returned 0xffffffff [0121.487] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0121.487] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xb, cFileName=".", cAlternateFileName="")) returned 0x7d2b18 [0121.487] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xb, cFileName="..", cAlternateFileName="")) returned 1 [0121.487] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xb, cFileName="RunTime", cAlternateFileName="")) returned 1 [0121.487] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0121.487] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0121.488] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.488] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\0__power_energyestimationengine.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0121.488] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0121.489] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cf [0121.489] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.489] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.602] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cf, lpOverlapped=0x0) returned 1 [0121.603] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0121.604] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.676] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.687] CloseHandle (hObject=0x1fc) returned 1 [0121.687] CloseHandle (hObject=0x1f8) returned 1 [0121.690] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\0__power_energyestimationengine.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0 [0121.690] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0x20 [0121.690] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0x7d2fd8 [0121.690] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0121.690] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0121.691] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 1 [0121.692] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 0xffffffff [0121.692] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0121.692] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0121.692] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0121.692] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0121.692] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0121.693] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x102 [0121.693] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.694] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.770] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x102, lpOverlapped=0x0) returned 1 [0121.771] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x110, lpOverlapped=0x0) returned 1 [0121.772] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.800] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.811] CloseHandle (hObject=0x204) returned 1 [0121.811] CloseHandle (hObject=0x1f8) returned 1 [0121.813] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0121.814] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0121.815] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2c98 [0121.815] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0121.815] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0121.815] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml")) returned 1 [0121.816] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml")) returned 0xffffffff [0121.816] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0121.816] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0121.816] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0121.816] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0121.816] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0121.816] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2a18 [0121.817] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0121.817] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0121.817] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0121.817] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0121.823] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x380 [0121.823] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.825] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0121.928] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x380, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x380, lpOverlapped=0x0) returned 1 [0121.930] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x390, lpOverlapped=0x0) returned 1 [0121.931] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0121.978] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.990] CloseHandle (hObject=0x200) returned 1 [0121.990] CloseHandle (hObject=0x1f8) returned 1 [0121.991] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0121.992] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0121.992] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d3098 [0121.992] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0121.992] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0121.992] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml")) returned 1 [0121.993] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml")) returned 0xffffffff [0121.993] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0121.993] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0121.994] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0121.994] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0121.994] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0121.995] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.090] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0122.091] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0122.092] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0122.116] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.127] CloseHandle (hObject=0x1f8) returned 1 [0122.127] CloseHandle (hObject=0x200) returned 1 [0122.129] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0122.129] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0122.130] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2b18 [0122.130] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0122.130] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0122.130] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml")) returned 1 [0122.131] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml")) returned 0xffffffff [0122.131] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0122.131] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x7d3098 [0122.132] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1 [0122.132] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x2, cFileName="RunTime", cAlternateFileName="")) returned 1 [0122.132] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0122.132] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0122.132] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0122.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\0__power_energyestimationengine.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0122.133] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0122.133] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x21b [0122.133] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0122.134] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.201] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x21b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x21b, lpOverlapped=0x0) returned 1 [0122.204] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x220, lpOverlapped=0x0) returned 1 [0122.205] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0122.228] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.239] CloseHandle (hObject=0x204) returned 1 [0122.239] CloseHandle (hObject=0x1fc) returned 1 [0122.240] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\0__power_energyestimationengine.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0 [0122.241] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0x20 [0122.241] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0x7d2958 [0122.241] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0122.241] FindClose (in: hFindFile=0x7d2958 | out: hFindFile=0x7d2958) returned 1 [0122.242] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 1 [0122.243] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 0xffffffff [0122.243] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0122.243] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0122.243] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0122.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0122.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0122.244] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x102 [0122.244] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0122.244] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.343] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x102, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x102, lpOverlapped=0x0) returned 1 [0122.344] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x110, lpOverlapped=0x0) returned 1 [0122.345] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0122.368] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.379] CloseHandle (hObject=0x1f8) returned 1 [0122.379] CloseHandle (hObject=0x1fc) returned 1 [0122.380] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0122.381] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0122.381] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2a98 [0122.381] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0122.381] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0122.381] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml")) returned 1 [0122.382] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml")) returned 0xffffffff [0122.382] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0122.382] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0122.382] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0122.383] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0122.383] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0122.383] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0122.383] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0122.383] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0122.384] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0122.384] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0122.386] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8c7 [0122.386] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0122.386] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.453] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8c7, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8c7, lpOverlapped=0x0) returned 1 [0122.455] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8d0, lpOverlapped=0x0) returned 1 [0122.456] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0122.479] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.490] CloseHandle (hObject=0x200) returned 1 [0122.490] CloseHandle (hObject=0x1fc) returned 1 [0122.491] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0122.491] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0122.492] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2c98 [0122.492] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0122.492] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0122.492] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml")) returned 1 [0122.493] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml")) returned 0xffffffff [0122.493] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0122.493] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0122.497] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0122.497] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0122.497] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0122.498] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.618] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0122.619] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0122.620] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0122.647] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.658] CloseHandle (hObject=0x1fc) returned 1 [0122.659] CloseHandle (hObject=0x200) returned 1 [0122.660] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0122.660] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0122.660] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2d58 [0122.660] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0122.660] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0122.661] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml")) returned 1 [0122.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml")) returned 0xffffffff [0122.662] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0122.662] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x4, cFileName=".", cAlternateFileName="")) returned 0x7d2998 [0122.662] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x4, cFileName="..", cAlternateFileName="")) returned 1 [0122.662] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x4, cFileName="RunTime", cAlternateFileName="")) returned 1 [0122.662] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0122.662] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0122.662] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0122.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\0__power_energyestimationengine.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0122.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0122.663] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x670 [0122.663] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0122.664] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.731] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x670, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x670, lpOverlapped=0x0) returned 1 [0122.733] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x680, lpOverlapped=0x0) returned 1 [0122.734] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0122.757] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.768] CloseHandle (hObject=0x1f8) returned 1 [0122.768] CloseHandle (hObject=0x204) returned 1 [0122.770] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\0__power_energyestimationengine.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0 [0122.770] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0x20 [0122.770] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0x7d2c18 [0122.770] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0122.770] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0122.771] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 1 [0122.772] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 0xffffffff [0122.772] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0122.772] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0122.772] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0122.772] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0122.772] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0122.772] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc [0122.773] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0122.773] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0122.977] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1cc, lpOverlapped=0x0) returned 1 [0122.978] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1d0, lpOverlapped=0x0) returned 1 [0122.979] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.003] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.014] CloseHandle (hObject=0x1fc) returned 1 [0123.014] CloseHandle (hObject=0x204) returned 1 [0123.015] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0123.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0123.016] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d3098 [0123.016] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0123.016] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0123.016] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml")) returned 1 [0123.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml")) returned 0xffffffff [0123.018] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0123.018] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0123.018] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0123.018] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0123.018] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0123.018] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2998 [0123.018] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0123.018] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0123.019] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0123.019] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0123.021] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc1 [0123.021] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.021] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.089] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc1, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x1cc1, lpOverlapped=0x0) returned 1 [0123.091] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1cd0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x1cd0, lpOverlapped=0x0) returned 1 [0123.092] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.117] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.128] CloseHandle (hObject=0x200) returned 1 [0123.129] CloseHandle (hObject=0x204) returned 1 [0123.130] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0123.130] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0123.130] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2918 [0123.130] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0123.130] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0123.131] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml")) returned 1 [0123.132] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml")) returned 0xffffffff [0123.132] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0123.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0123.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0123.133] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0123.133] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.133] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.201] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0123.204] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0123.205] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.228] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.239] CloseHandle (hObject=0x204) returned 1 [0123.240] CloseHandle (hObject=0x200) returned 1 [0123.241] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0123.241] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0123.241] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2cd8 [0123.241] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0123.242] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0123.242] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml")) returned 1 [0123.243] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml")) returned 0xffffffff [0123.243] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0123.243] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xd, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0123.243] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xd, cFileName="..", cAlternateFileName="")) returned 1 [0123.243] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xd, cFileName="RunTime", cAlternateFileName="")) returned 1 [0123.243] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0123.247] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0123.247] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0123.247] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\0__power_energyestimationengine.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0123.248] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0123.248] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1bae [0123.248] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.248] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.355] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1bae, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1bae, lpOverlapped=0x0) returned 1 [0123.360] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1bc0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1bc0, lpOverlapped=0x0) returned 1 [0123.361] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.385] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.398] CloseHandle (hObject=0x1fc) returned 1 [0123.398] CloseHandle (hObject=0x1f8) returned 1 [0123.399] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\0__power_energyestimationengine.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0 [0123.400] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0x20 [0123.400] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0x7d3018 [0123.400] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0123.400] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0123.400] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 1 [0123.401] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 0xffffffff [0123.401] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0123.401] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0123.401] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0123.401] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0123.402] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0123.402] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc [0123.402] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.403] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.475] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1cc, lpOverlapped=0x0) returned 1 [0123.476] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1d0, lpOverlapped=0x0) returned 1 [0123.477] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.502] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.514] CloseHandle (hObject=0x204) returned 1 [0123.514] CloseHandle (hObject=0x1f8) returned 1 [0123.515] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0123.516] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0123.516] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2d58 [0123.516] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0123.516] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0123.516] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml")) returned 1 [0123.584] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml")) returned 0xffffffff [0123.584] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0123.584] FindClose (in: hFindFile=0x7d2fd8 | out: hFindFile=0x7d2fd8) returned 1 [0123.585] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0123.585] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0123.585] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0123.585] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2d58 [0123.588] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0123.589] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0123.591] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0123.592] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0123.592] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85a [0123.592] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.593] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.668] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x85a, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x85a, lpOverlapped=0x0) returned 1 [0123.710] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x860, lpOverlapped=0x0) returned 1 [0123.711] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.734] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.746] CloseHandle (hObject=0x200) returned 1 [0123.746] CloseHandle (hObject=0x1f8) returned 1 [0123.747] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0123.748] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0123.748] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 0x7d2cd8 [0123.748] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 0 [0123.748] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0123.748] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml")) returned 1 [0123.749] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml")) returned 0xffffffff [0123.749] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0123.749] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0123.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0123.755] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0123.755] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.755] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.824] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0123.825] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0123.826] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.852] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.863] CloseHandle (hObject=0x1f8) returned 1 [0123.864] CloseHandle (hObject=0x200) returned 1 [0123.865] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0123.865] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0123.866] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d2b58 [0123.866] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0123.866] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0123.866] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml")) returned 1 [0123.867] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml")) returned 0xffffffff [0123.867] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0123.867] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xe, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0123.867] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xe, cFileName="..", cAlternateFileName="")) returned 1 [0123.867] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xe, cFileName="RunTime", cAlternateFileName="")) returned 1 [0123.867] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2c18 [0123.867] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0123.868] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0123.868] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\0__power_policy.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0123.868] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0123.868] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x710 [0123.868] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.869] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0123.938] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x710, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x710, lpOverlapped=0x0) returned 1 [0123.941] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x720, lpOverlapped=0x0) returned 1 [0123.944] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0123.967] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.979] CloseHandle (hObject=0x204) returned 1 [0123.980] CloseHandle (hObject=0x1fc) returned 1 [0123.981] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\0__power_policy.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0 [0123.981] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\MF9fUG93ZXJfUG9s1WN5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\mf9fug93zxjfug9s1wn5lnby33z43ww9.0ilfzr")) returned 0x20 [0123.981] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\0__Power_Policy.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0x7d2c98 [0123.982] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x90, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0 [0123.982] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0123.982] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\0__power_policy.provxml")) returned 1 [0123.983] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\0__Power_Policy.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\0__power_policy.provxml")) returned 0xffffffff [0123.983] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0 [0123.983] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0123.983] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0123.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0123.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0123.984] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfb [0123.984] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0123.985] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0124.104] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0xfb, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0xfb, lpOverlapped=0x0) returned 1 [0124.105] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x100, lpOverlapped=0x0) returned 1 [0124.106] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0124.146] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.160] CloseHandle (hObject=0x1f8) returned 1 [0124.160] CloseHandle (hObject=0x1fc) returned 1 [0124.161] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0124.162] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0124.162] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2f58 [0124.162] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0124.162] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0124.162] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml")) returned 1 [0124.163] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml")) returned 0xffffffff [0124.163] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x65776f50, dwReserved1=0x6f505f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0124.163] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0124.163] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0124.163] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0124.163] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0124.163] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2998 [0124.164] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0124.164] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0124.164] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0124.165] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0124.166] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8b5 [0124.166] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0124.167] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0124.272] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x8b5, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x8b5, lpOverlapped=0x0) returned 1 [0124.274] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x8c0, lpOverlapped=0x0) returned 1 [0124.275] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0124.298] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.310] CloseHandle (hObject=0x200) returned 1 [0124.310] CloseHandle (hObject=0x1fc) returned 1 [0124.312] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0124.312] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0124.312] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2ad8 [0124.313] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0124.313] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0124.313] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml")) returned 1 [0124.316] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml")) returned 0xffffffff [0124.316] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0124.316] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0124.316] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0124.317] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0124.317] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0124.318] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0124.383] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0124.384] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0124.385] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0124.410] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.421] CloseHandle (hObject=0x1fc) returned 1 [0124.421] CloseHandle (hObject=0x200) returned 1 [0124.422] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0124.423] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0124.424] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2b18 [0124.424] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0124.424] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0124.424] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml")) returned 1 [0124.425] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml")) returned 0xffffffff [0124.425] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0124.425] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x2, cFileName=".", cAlternateFileName="")) returned 0x7d29d8 [0124.426] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x2, cFileName="..", cAlternateFileName="")) returned 1 [0124.426] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x2, cFileName="RunTime", cAlternateFileName="")) returned 1 [0124.426] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0124.426] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0124.426] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0124.426] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\0__power_energyestimationengine.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0124.426] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0124.427] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x663 [0124.427] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0124.427] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0124.575] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x663, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x663, lpOverlapped=0x0) returned 1 [0124.615] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x670, lpOverlapped=0x0) returned 1 [0124.616] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0124.639] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.651] CloseHandle (hObject=0x1f8) returned 1 [0124.651] CloseHandle (hObject=0x204) returned 1 [0124.652] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\0__power_energyestimationengine.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0 [0124.653] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0x20 [0124.653] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0x7d2ad8 [0124.653] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0124.653] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0124.653] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 1 [0124.654] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 0xffffffff [0124.654] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0124.654] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0124.654] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0124.655] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0124.655] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0124.655] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc [0124.655] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0124.656] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0124.726] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x1cc, lpOverlapped=0x0) returned 1 [0124.728] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x1d0, lpOverlapped=0x0) returned 1 [0124.729] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0124.754] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.765] CloseHandle (hObject=0x1fc) returned 1 [0124.765] CloseHandle (hObject=0x204) returned 1 [0124.767] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0124.767] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0124.767] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2f58 [0124.767] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0124.767] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0124.768] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml")) returned 1 [0124.768] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml")) returned 0xffffffff [0124.769] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0124.769] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0124.769] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0124.769] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0124.769] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0124.769] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2918 [0124.769] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0124.769] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0124.769] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0124.770] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0124.771] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x67b [0124.771] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0124.772] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0124.843] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x67b, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x67b, lpOverlapped=0x0) returned 1 [0124.861] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x680, lpOverlapped=0x0) returned 1 [0124.862] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0124.885] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.896] CloseHandle (hObject=0x200) returned 1 [0124.897] CloseHandle (hObject=0x204) returned 1 [0124.899] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0124.900] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0124.900] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0x7d2b98 [0124.900] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="")) returned 0 [0124.900] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0124.900] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml")) returned 1 [0124.901] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml")) returned 0xffffffff [0124.901] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0124.902] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0124.904] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0124.905] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0124.905] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0124.905] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0125.012] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0125.013] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0125.014] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0125.037] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.049] CloseHandle (hObject=0x204) returned 1 [0125.050] CloseHandle (hObject=0x200) returned 1 [0125.051] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0125.051] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0125.051] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0x7d2b58 [0125.052] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 0 [0125.052] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0125.052] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml")) returned 1 [0125.053] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml")) returned 0xffffffff [0125.053] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0125.053] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x11, cFileName=".", cAlternateFileName="")) returned 0x7d2b18 [0125.053] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x11, cFileName="..", cAlternateFileName="")) returned 1 [0125.053] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0x11, cFileName="RunTime", cAlternateFileName="")) returned 1 [0125.053] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0125.053] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0125.053] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0125.053] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\0__power_energyestimationengine.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0125.055] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0125.055] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a5 [0125.055] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0125.055] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0125.123] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a5, lpOverlapped=0x0) returned 1 [0125.153] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0125.154] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0125.177] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.267] CloseHandle (hObject=0x1fc) returned 1 [0125.267] CloseHandle (hObject=0x1f8) returned 1 [0125.271] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\0__power_energyestimationengine.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0 [0125.272] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\MF9fUG93ZXJfRW5lcmd5RXN01W12dGlv35V6Z2l6ZS5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\mf9fug93zxjfrw5lcmd5rxn01w12dglv35v6z2l6zs5wcm927g1s.0ilfzr")) returned 0x20 [0125.272] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0x7d2b58 [0125.272] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0125.272] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0125.272] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 1 [0125.273] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\0__Power_EnergyEstimationEngine.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\0__power_energyestimationengine.provxml")) returned 0xffffffff [0125.273] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0125.273] FindClose (in: hFindFile=0x7d2f58 | out: hFindFile=0x7d2f58) returned 1 [0125.273] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0125.274] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0125.274] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\unv6vgltzs543ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0125.274] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x222 [0125.274] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0125.275] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0125.356] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x222, lpNumberOfBytesRead=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19ed5c*=0x222, lpOverlapped=0x0) returned 1 [0125.366] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x19ed5c, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19ed5c*=0x230, lpOverlapped=0x0) returned 1 [0125.370] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0125.393] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.404] CloseHandle (hObject=0x204) returned 1 [0125.404] CloseHandle (hObject=0x1f8) returned 1 [0125.406] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0 [0125.407] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\UnV6VGltZS543Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\unv6vgltzs543ww9.0ilfzr")) returned 0x20 [0125.411] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0x7d2d58 [0125.411] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19ec58 | out: lpFindFileData=0x19ec58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x7c8658, dwReserved1=0x7e0338, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0125.411] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0125.412] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml")) returned 1 [0125.413] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml")) returned 0xffffffff [0125.413] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x65776f50, dwReserved1=0x6e455f72, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0125.413] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0125.413] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0125.413] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0125.413] FindNextFileA (in: hFindFile=0x7d2d18, lpFindFileData=0x19f4b4 | out: lpFindFileData=0x19f4b4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x44726576, dwReserved1=0x73617461, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0125.413] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*.*", lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName=".", cAlternateFileName="")) returned 0x7d2f58 [0125.418] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="..", cAlternateFileName="")) returned 1 [0125.418] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x656d6954, dwReserved1=0x6c6d782e, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0125.418] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0125.419] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0125.419] GetFileSize (in: hFile=0x200, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9ba5b [0125.419] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0125.420] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0125.492] ReadFile (in: hFile=0x200, lpBuffer=0x238000e, nNumberOfBytesToRead=0x9ba5b, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x9ba5b, lpOverlapped=0x0) returned 1 [0125.611] WriteFile (in: hFile=0x1f8, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x9ba60, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x9ba60, lpOverlapped=0x0) returned 1 [0125.622] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0125.662] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.674] CloseHandle (hObject=0x200) returned 1 [0125.674] CloseHandle (hObject=0x1f8) returned 1 [0125.686] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0 [0125.687] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Y3VzdG9t1Xp2dGlv3nM67G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\y3vzdg9t1xp2dglv3nm67g1s.0ilfzr")) returned 0x20 [0125.687] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 0x7d2ad8 [0125.687] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x7c, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 0 [0125.687] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0125.687] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml")) returned 1 [0125.693] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml")) returned 0xffffffff [0125.693] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0125.693] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1f8 [0125.694] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x200 [0125.694] GetFileSize (in: hFile=0x1f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10f [0125.694] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0125.695] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0125.772] ReadFile (in: hFile=0x1f8, lpBuffer=0x238000e, nNumberOfBytesToRead=0x10f, lpNumberOfBytesRead=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19efc4*=0x10f, lpOverlapped=0x0) returned 1 [0125.773] WriteFile (in: hFile=0x200, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x19efc4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19efc4*=0x120, lpOverlapped=0x0) returned 1 [0125.773] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0125.796] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.810] CloseHandle (hObject=0x1f8) returned 1 [0125.811] CloseHandle (hObject=0x200) returned 1 [0125.812] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0 [0125.812] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\TWFzdGVyRGF0YXN033JlLn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\twfzdgvyrgf0yxn033jlln2t3a99.0ilfzr")) returned 0x20 [0125.812] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 0x7d3098 [0125.813] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19eec0 | out: lpFindFileData=0x19eec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 0 [0125.813] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0125.813] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml")) returned 1 [0125.814] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml")) returned 0xffffffff [0125.814] FindNextFileA (in: hFindFile=0x7d2f58, lpFindFileData=0x19f24c | out: lpFindFileData=0x19f24c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0125.814] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\*.*", lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xf, cFileName=".", cAlternateFileName="")) returned 0x7d2fd8 [0125.814] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xf, cFileName="..", cAlternateFileName="")) returned 1 [0125.814] FindNextFileA (in: hFindFile=0x7d2fd8, lpFindFileData=0x19efe4 | out: lpFindFileData=0x19efe4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x20228, dwReserved1=0xf, cFileName="RunTime", cAlternateFileName="")) returned 1 [0125.814] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\*.*", lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName=".", cAlternateFileName="")) returned 0x7d2958 [0125.908] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="..", cAlternateFileName="")) returned 1 [0125.910] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900a4472, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900a4472, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x19ec18, dwReserved1=0x7c4e48, cFileName="0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="0__CON~1.PRO")) returned 1 [0125.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\0__connections_cellular_albanian mobile communications (albania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0125.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0125.915] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dd [0125.915] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0125.915] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0126.020] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dd, lpOverlapped=0x0) returned 1 [0126.086] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0126.087] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0126.109] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.120] CloseHandle (hObject=0x204) returned 1 [0126.120] CloseHandle (hObject=0x1fc) returned 1 [0126.122] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\0__connections_cellular_albanian mobile communications (albania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0126.122] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0126.122] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900a4472, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900a4472, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="0__CON~1.PRO")) returned 0x7d29d8 [0126.123] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900a4472, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900a4472, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="0__CON~1.PRO")) returned 0 [0126.123] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0126.123] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\0__connections_cellular_albanian mobile communications (albania)_i0$(__mvid)@wap.provxml")) returned 1 [0126.124] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\0__connections_cellular_albanian mobile communications (albania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0126.124] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="100__C~1.PRO")) returned 1 [0126.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\100__connections_cellular_telia dk (denmark)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0126.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0126.125] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x292 [0126.125] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0126.125] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0126.204] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x292, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x292, lpOverlapped=0x0) returned 1 [0126.209] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0126.210] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0126.246] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.257] CloseHandle (hObject=0x1fc) returned 1 [0126.257] CloseHandle (hObject=0x204) returned 1 [0126.258] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\100__connections_cellular_telia dk (denmark)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0126.259] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0126.259] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="100__C~1.PRO")) returned 0x7d2b18 [0126.259] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="100__C~1.PRO")) returned 0 [0126.259] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0126.259] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\100__connections_cellular_telia dk (denmark)_i0$(__mvid)@wap.provxml")) returned 1 [0126.260] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\100__connections_cellular_telia dk (denmark)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0126.260] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="101__C~1.PRO")) returned 1 [0126.261] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\101__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0126.261] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0126.261] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d2 [0126.261] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0126.262] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0126.329] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d2, lpOverlapped=0x0) returned 1 [0126.331] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0126.332] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0126.355] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.366] CloseHandle (hObject=0x204) returned 1 [0126.367] CloseHandle (hObject=0x1fc) returned 1 [0126.368] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\101__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0126.369] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0126.369] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="101__C~1.PRO")) returned 0x7d2c98 [0126.369] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="101__C~1.PRO")) returned 0 [0126.369] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0126.369] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\101__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0126.465] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\101__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0126.466] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="102__C~1.PRO")) returned 1 [0126.466] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\102__connections_cellular_claro (dominican republic)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0126.466] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0126.467] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0126.467] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0126.467] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0126.602] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0126.737] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0126.738] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0126.762] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.773] CloseHandle (hObject=0x1fc) returned 1 [0126.773] CloseHandle (hObject=0x204) returned 1 [0126.774] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\102__connections_cellular_claro (dominican republic)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0126.775] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0126.775] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="102__C~1.PRO")) returned 0x7d2d58 [0126.775] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="102__C~1.PRO")) returned 0 [0126.775] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0126.775] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\102__connections_cellular_claro (dominican republic)_i0$(__mvid)@wap.provxml")) returned 1 [0126.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\102__connections_cellular_claro (dominican republic)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0126.776] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", cAlternateFileName="103__C~1.PRO")) returned 1 [0126.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\103__connections_cellular_claro (dominican republic)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0126.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0126.779] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29e [0126.779] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0126.779] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0126.847] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29e, lpOverlapped=0x0) returned 1 [0126.884] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0126.885] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0126.910] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.922] CloseHandle (hObject=0x204) returned 1 [0126.922] CloseHandle (hObject=0x1fc) returned 1 [0126.923] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\103__connections_cellular_claro (dominican republic)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0126.924] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0126.924] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", cAlternateFileName="103__C~1.PRO")) returned 0x7d2ad8 [0126.924] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", cAlternateFileName="103__C~1.PRO")) returned 0 [0126.924] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0126.924] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\103__connections_cellular_claro (dominican republic)_i1$(__mvid)@wap.provxml")) returned 1 [0126.925] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\103__connections_cellular_claro (dominican republic)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0126.925] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="104__C~1.PRO")) returned 1 [0126.925] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\104__connections_cellular_porta gsm (ecuador)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0126.926] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0126.926] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x283 [0126.926] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0126.927] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0127.043] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x283, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x283, lpOverlapped=0x0) returned 1 [0127.061] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0127.062] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0127.087] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.098] CloseHandle (hObject=0x1fc) returned 1 [0127.098] CloseHandle (hObject=0x204) returned 1 [0127.100] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\104__connections_cellular_porta gsm (ecuador)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0127.100] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0127.100] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="104__C~1.PRO")) returned 0x7d2c18 [0127.100] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="104__C~1.PRO")) returned 0 [0127.101] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0127.101] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\104__connections_cellular_porta gsm (ecuador)_i0$(__mvid)@wap.provxml")) returned 1 [0127.102] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\104__connections_cellular_porta gsm (ecuador)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0127.102] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="105__C~1.PRO")) returned 1 [0127.102] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\105__connections_cellular_telefonica (ecuador)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0127.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0127.103] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d9 [0127.103] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0127.104] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0127.236] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d9, lpOverlapped=0x0) returned 1 [0127.240] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0127.242] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0127.269] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.280] CloseHandle (hObject=0x204) returned 1 [0127.281] CloseHandle (hObject=0x1fc) returned 1 [0127.283] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\105__connections_cellular_telefonica (ecuador)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0127.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0127.284] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="105__C~1.PRO")) returned 0x7d29d8 [0127.284] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="105__C~1.PRO")) returned 0 [0127.284] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0127.284] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\105__connections_cellular_telefonica (ecuador)_i0$(__mvid)@wap.provxml")) returned 1 [0127.285] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\105__connections_cellular_telefonica (ecuador)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0127.285] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="106__C~1.PRO")) returned 1 [0127.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\106__connections_cellular_mobinil (egypt)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0127.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0127.286] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0127.286] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0127.287] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0127.395] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0127.398] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0127.399] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0127.423] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.435] CloseHandle (hObject=0x1fc) returned 1 [0127.435] CloseHandle (hObject=0x204) returned 1 [0127.438] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\106__connections_cellular_mobinil (egypt)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0127.438] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0127.438] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="106__C~1.PRO")) returned 0x7d2998 [0127.439] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="106__C~1.PRO")) returned 0 [0127.439] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0127.439] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\106__connections_cellular_mobinil (egypt)_i0$(__mvid)@wap.provxml")) returned 1 [0127.440] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\106__connections_cellular_mobinil (egypt)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0127.440] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="107__C~1.PRO")) returned 1 [0127.440] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\107__connections_cellular_vodafone egypt (egypt)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0127.440] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0127.441] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0127.441] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0127.441] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0127.510] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0127.524] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0127.525] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0127.655] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.668] CloseHandle (hObject=0x204) returned 1 [0127.669] CloseHandle (hObject=0x1fc) returned 1 [0127.670] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\107__connections_cellular_vodafone egypt (egypt)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0127.671] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0127.671] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="107__C~1.PRO")) returned 0x7d2cd8 [0127.671] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="107__C~1.PRO")) returned 0 [0127.672] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0127.672] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\107__connections_cellular_vodafone egypt (egypt)_i0$(__mvid)@wap.provxml")) returned 1 [0127.673] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\107__connections_cellular_vodafone egypt (egypt)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0127.673] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="108__C~1.PRO")) returned 1 [0127.673] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\108__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0127.673] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0127.674] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0127.674] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0127.674] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0127.745] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0127.746] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0127.747] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0127.771] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.787] CloseHandle (hObject=0x1fc) returned 1 [0127.787] CloseHandle (hObject=0x204) returned 1 [0127.788] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\108__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0127.788] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0127.789] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="108__C~1.PRO")) returned 0x7d2cd8 [0127.789] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="108__C~1.PRO")) returned 0 [0127.789] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0127.789] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\108__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0127.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\108__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0127.790] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="109__C~1.PRO")) returned 1 [0127.790] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\109__connections_cellular_etisalat misr (egypt)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0127.790] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0127.791] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0127.791] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0127.791] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0127.861] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0127.934] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0127.935] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0127.959] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.976] CloseHandle (hObject=0x204) returned 1 [0127.976] CloseHandle (hObject=0x1fc) returned 1 [0127.977] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\109__connections_cellular_etisalat misr (egypt)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0127.978] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0127.978] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="109__C~1.PRO")) returned 0x7d3018 [0127.978] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="109__C~1.PRO")) returned 0 [0127.978] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0127.978] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\109__connections_cellular_etisalat misr (egypt)_i0$(__mvid)@wap.provxml")) returned 1 [0127.979] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\109__connections_cellular_etisalat misr (egypt)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0127.979] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="10__CO~1.PRO")) returned 1 [0127.979] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\10__connections_cellular_optus (australia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0127.980] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0127.980] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0127.980] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0127.980] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0128.063] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0128.102] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0128.103] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0128.127] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.138] CloseHandle (hObject=0x1fc) returned 1 [0128.138] CloseHandle (hObject=0x204) returned 1 [0128.141] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\10__connections_cellular_optus (australia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0128.141] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0128.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="10__CO~1.PRO")) returned 0x7d3018 [0128.142] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="10__CO~1.PRO")) returned 0 [0128.142] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0128.142] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\10__connections_cellular_optus (australia)_i1$(__mvid)@wap.provxml")) returned 1 [0128.143] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\10__connections_cellular_optus (australia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0128.143] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="110__C~1.PRO")) returned 1 [0128.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\110__connections_cellular_claro (el salvador)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0128.144] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0128.144] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0128.144] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0128.146] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0128.265] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0128.269] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0128.273] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0128.308] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.323] CloseHandle (hObject=0x204) returned 1 [0128.323] CloseHandle (hObject=0x1fc) returned 1 [0128.325] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\110__connections_cellular_claro (el salvador)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0128.325] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0128.325] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="110__C~1.PRO")) returned 0x7d2c98 [0128.326] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="110__C~1.PRO")) returned 0 [0128.326] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0128.326] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\110__connections_cellular_claro (el salvador)_i0$(__mvid)@wap.provxml")) returned 1 [0128.328] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\110__connections_cellular_claro (el salvador)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0128.328] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="111__C~1.PRO")) returned 1 [0128.328] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\111__connections_cellular_claro (el salvador)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0128.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0128.329] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0128.329] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0128.330] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0128.405] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0128.423] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0128.424] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0128.447] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.480] CloseHandle (hObject=0x1fc) returned 1 [0128.480] CloseHandle (hObject=0x204) returned 1 [0128.482] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\111__connections_cellular_claro (el salvador)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0128.482] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0128.482] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="111__C~1.PRO")) returned 0x7d2d58 [0128.482] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="111__C~1.PRO")) returned 0 [0128.482] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0128.483] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\111__connections_cellular_claro (el salvador)_i1$(__mvid)@wap.provxml")) returned 1 [0128.484] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\111__connections_cellular_claro (el salvador)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0128.484] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="112__C~1.PRO")) returned 1 [0128.484] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\112__connections_cellular_telefonica (el salvador)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0128.485] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0128.485] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0128.485] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0128.486] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0128.619] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0128.625] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0128.626] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0128.651] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.662] CloseHandle (hObject=0x204) returned 1 [0128.662] CloseHandle (hObject=0x1fc) returned 1 [0128.663] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\112__connections_cellular_telefonica (el salvador)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0128.664] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0128.664] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="112__C~1.PRO")) returned 0x7d3098 [0128.664] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="112__C~1.PRO")) returned 0 [0128.664] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0128.664] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\112__connections_cellular_telefonica (el salvador)_i0$(__mvid)@wap.provxml")) returned 1 [0128.665] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\112__connections_cellular_telefonica (el salvador)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0128.665] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="113__C~1.PRO")) returned 1 [0128.666] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\113__connections_cellular_tigo (el salvador)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0128.666] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0128.666] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0128.666] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0128.667] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0128.736] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0128.748] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0128.900] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0128.925] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.936] CloseHandle (hObject=0x1fc) returned 1 [0128.937] CloseHandle (hObject=0x204) returned 1 [0128.938] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\113__connections_cellular_tigo (el salvador)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0128.939] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0128.939] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="113__C~1.PRO")) returned 0x7d2b58 [0128.939] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="113__C~1.PRO")) returned 0 [0128.939] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0128.939] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\113__connections_cellular_tigo (el salvador)_i0$(__mvid)@wap.provxml")) returned 1 [0128.940] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\113__connections_cellular_tigo (el salvador)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0128.940] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="114__C~1.PRO")) returned 1 [0128.940] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\114__connections_cellular_tigo (el salvador)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0128.941] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0128.941] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28c [0128.941] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0128.941] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0129.040] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28c, lpOverlapped=0x0) returned 1 [0129.105] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0129.106] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0129.130] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.144] CloseHandle (hObject=0x204) returned 1 [0129.144] CloseHandle (hObject=0x1fc) returned 1 [0129.145] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\114__connections_cellular_tigo (el salvador)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0129.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0129.146] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="114__C~1.PRO")) returned 0x7d3018 [0129.146] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="114__C~1.PRO")) returned 0 [0129.146] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0129.146] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\114__connections_cellular_tigo (el salvador)_i1$(__mvid)@wap.provxml")) returned 1 [0129.147] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\114__connections_cellular_tigo (el salvador)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0129.148] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="115__C~1.PRO")) returned 1 [0129.150] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\115__connections_cellular_elisa estonia (estonia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0129.150] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0129.151] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0129.151] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0129.151] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0129.219] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0129.252] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0129.253] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0129.294] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.305] CloseHandle (hObject=0x1fc) returned 1 [0129.305] CloseHandle (hObject=0x204) returned 1 [0129.306] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\115__connections_cellular_elisa estonia (estonia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0129.307] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0129.307] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="115__C~1.PRO")) returned 0x7d2c58 [0129.307] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="115__C~1.PRO")) returned 0 [0129.307] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0129.307] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\115__connections_cellular_elisa estonia (estonia)_i0$(__mvid)@wap.provxml")) returned 1 [0129.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\115__connections_cellular_elisa estonia (estonia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0129.308] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="116__C~1.PRO")) returned 1 [0129.309] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\116__connections_cellular_emt (estonia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0129.309] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0129.309] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0129.309] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0129.310] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0129.427] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0129.446] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0129.447] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0129.506] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.594] CloseHandle (hObject=0x204) returned 1 [0129.595] CloseHandle (hObject=0x1fc) returned 1 [0129.596] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\116__connections_cellular_emt (estonia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0129.596] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0129.596] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="116__C~1.PRO")) returned 0x7d2998 [0129.597] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="116__C~1.PRO")) returned 0 [0129.597] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0129.597] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\116__connections_cellular_emt (estonia)_i0$(__mvid)@wap.provxml")) returned 1 [0129.598] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\116__connections_cellular_emt (estonia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0129.598] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="117__C~1.PRO")) returned 1 [0129.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\117__connections_cellular_emt (estonia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0129.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0129.599] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0129.599] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0129.599] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0129.670] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0129.691] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0129.692] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0129.715] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.727] CloseHandle (hObject=0x1fc) returned 1 [0129.727] CloseHandle (hObject=0x204) returned 1 [0129.728] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\117__connections_cellular_emt (estonia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0129.729] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0129.729] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="117__C~1.PRO")) returned 0x7d2cd8 [0129.729] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="117__C~1.PRO")) returned 0 [0129.729] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0129.729] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\117__connections_cellular_emt (estonia)_i1$(__mvid)@wap.provxml")) returned 1 [0129.730] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\117__connections_cellular_emt (estonia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0129.730] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="118__C~1.PRO")) returned 1 [0129.730] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\118__connections_cellular_tele2 (estonia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0129.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0129.731] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0129.731] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0129.732] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0129.803] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0129.805] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0129.806] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0129.830] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.841] CloseHandle (hObject=0x204) returned 1 [0129.842] CloseHandle (hObject=0x1fc) returned 1 [0129.843] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\118__connections_cellular_tele2 (estonia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0129.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0129.844] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="118__C~1.PRO")) returned 0x7d2998 [0129.844] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="118__C~1.PRO")) returned 0 [0129.844] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0129.844] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\118__connections_cellular_tele2 (estonia)_i0$(__mvid)@wap.provxml")) returned 1 [0129.845] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\118__connections_cellular_tele2 (estonia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0129.845] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="119__C~1.PRO")) returned 1 [0129.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\119__connections_cellular_tele2 (estonia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0129.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0129.846] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0129.846] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0129.847] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0129.916] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0129.921] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0129.922] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.026] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.038] CloseHandle (hObject=0x1fc) returned 1 [0130.038] CloseHandle (hObject=0x204) returned 1 [0130.039] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\119__connections_cellular_tele2 (estonia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0130.040] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0130.040] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="119__C~1.PRO")) returned 0x7d2a58 [0130.040] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="119__C~1.PRO")) returned 0 [0130.040] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0130.040] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\119__connections_cellular_tele2 (estonia)_i1$(__mvid)@wap.provxml")) returned 1 [0130.041] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\119__connections_cellular_tele2 (estonia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0130.041] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="11__CO~1.PRO")) returned 1 [0130.041] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\11__connections_cellular_optus (australia)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0130.042] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0130.042] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0130.042] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0130.042] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0130.109] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0130.147] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0130.148] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.171] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.183] CloseHandle (hObject=0x204) returned 1 [0130.183] CloseHandle (hObject=0x1fc) returned 1 [0130.184] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\11__connections_cellular_optus (australia)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0130.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0130.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="11__CO~1.PRO")) returned 0x7d2c18 [0130.185] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="11__CO~1.PRO")) returned 0 [0130.185] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0130.185] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\11__connections_cellular_optus (australia)_i2$(__mvid)@wap.provxml")) returned 1 [0130.187] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\11__connections_cellular_optus (australia)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0130.187] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="120__C~1.PRO")) returned 1 [0130.188] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\120__connections_cellular_vodafone fo (faroe islands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0130.188] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0130.188] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0130.188] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0130.189] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0130.256] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0130.285] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0130.286] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.311] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.323] CloseHandle (hObject=0x1fc) returned 1 [0130.323] CloseHandle (hObject=0x204) returned 1 [0130.324] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\120__connections_cellular_vodafone fo (faroe islands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0130.325] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0130.325] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="120__C~1.PRO")) returned 0x7d29d8 [0130.325] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="120__C~1.PRO")) returned 0 [0130.325] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0130.325] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\120__connections_cellular_vodafone fo (faroe islands)_i0$(__mvid)@wap.provxml")) returned 1 [0130.326] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\120__connections_cellular_vodafone fo (faroe islands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0130.326] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="121__C~1.PRO")) returned 1 [0130.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\121__connections_cellular_kidanet (fiji)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0130.330] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0130.330] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0130.330] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0130.331] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0130.415] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0130.449] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0130.450] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.473] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.488] CloseHandle (hObject=0x204) returned 1 [0130.489] CloseHandle (hObject=0x1fc) returned 1 [0130.490] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\121__connections_cellular_kidanet (fiji)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0130.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0130.490] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="121__C~1.PRO")) returned 0x7d2b98 [0130.491] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="121__C~1.PRO")) returned 0 [0130.491] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0130.491] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\121__connections_cellular_kidanet (fiji)_i0$(__mvid)@wap.provxml")) returned 1 [0130.492] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\121__connections_cellular_kidanet (fiji)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0130.492] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="122__C~1.PRO")) returned 1 [0130.492] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\122__connections_cellular_vodafone fiji (fiji)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0130.492] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0130.493] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d8 [0130.493] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0130.493] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0130.669] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d8, lpOverlapped=0x0) returned 1 [0130.696] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0130.697] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.721] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.732] CloseHandle (hObject=0x1fc) returned 1 [0130.733] CloseHandle (hObject=0x204) returned 1 [0130.738] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\122__connections_cellular_vodafone fiji (fiji)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0130.738] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0130.738] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="122__C~1.PRO")) returned 0x7d2c18 [0130.738] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="122__C~1.PRO")) returned 0 [0130.738] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0130.739] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\122__connections_cellular_vodafone fiji (fiji)_i0$(__mvid)@wap.provxml")) returned 1 [0130.740] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\122__connections_cellular_vodafone fiji (fiji)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0130.740] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", cAlternateFileName="123__C~1.PRO")) returned 1 [0130.740] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\123__connections_cellular_vodafone fiji (fiji)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0130.741] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0130.741] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2de [0130.741] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0130.742] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0130.813] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2de, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2de, lpOverlapped=0x0) returned 1 [0130.856] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0130.857] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.880] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.894] CloseHandle (hObject=0x204) returned 1 [0130.894] CloseHandle (hObject=0x1fc) returned 1 [0130.895] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\123__connections_cellular_vodafone fiji (fiji)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0130.896] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0130.896] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", cAlternateFileName="123__C~1.PRO")) returned 0x7d2b18 [0130.896] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", cAlternateFileName="123__C~1.PRO")) returned 0 [0130.896] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0130.896] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\123__connections_cellular_vodafone fiji (fiji)_i1$(__mvid)@wap.provxml")) returned 1 [0130.898] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\123__connections_cellular_vodafone fiji (fiji)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0130.898] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="124__C~1.PRO")) returned 1 [0130.898] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\124__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0130.898] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0130.898] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0130.899] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0130.899] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0130.967] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0130.968] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0130.969] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0130.997] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.008] CloseHandle (hObject=0x1fc) returned 1 [0131.008] CloseHandle (hObject=0x204) returned 1 [0131.010] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\124__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0131.010] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0131.010] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="124__C~1.PRO")) returned 0x7d3018 [0131.010] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="124__C~1.PRO")) returned 0 [0131.010] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0131.011] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\124__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0131.012] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\124__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0131.012] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="125__C~1.PRO")) returned 1 [0131.012] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\125__connections_cellular_alands mobiltelefon ab (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0131.012] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0131.012] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0131.012] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0131.013] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0131.094] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0131.096] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0131.097] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0131.121] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.191] CloseHandle (hObject=0x204) returned 1 [0131.191] CloseHandle (hObject=0x1fc) returned 1 [0131.193] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\125__connections_cellular_alands mobiltelefon ab (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0131.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0131.193] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="125__C~1.PRO")) returned 0x7d3018 [0131.193] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="125__C~1.PRO")) returned 0 [0131.194] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0131.194] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\125__connections_cellular_alands mobiltelefon ab (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0131.195] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\125__connections_cellular_alands mobiltelefon ab (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0131.195] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="126__C~1.PRO")) returned 1 [0131.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\126__connections_cellular_alands mobiltelefon ab (finland)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0131.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0131.196] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29c [0131.196] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0131.196] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0131.326] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29c, lpOverlapped=0x0) returned 1 [0131.337] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0131.339] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0131.376] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.387] CloseHandle (hObject=0x1fc) returned 1 [0131.387] CloseHandle (hObject=0x204) returned 1 [0131.388] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\126__connections_cellular_alands mobiltelefon ab (finland)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0131.389] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0131.389] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="126__C~1.PRO")) returned 0x7d3018 [0131.389] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="126__C~1.PRO")) returned 0 [0131.389] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0131.389] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\126__connections_cellular_alands mobiltelefon ab (finland)_i1$(__mvid)@wap.provxml")) returned 1 [0131.390] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\126__connections_cellular_alands mobiltelefon ab (finland)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0131.390] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="127__C~1.PRO")) returned 1 [0131.391] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\127__connections_cellular_dna (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0131.391] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0131.391] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27f [0131.391] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0131.392] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0131.485] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27f, lpOverlapped=0x0) returned 1 [0131.505] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0131.506] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0131.615] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.626] CloseHandle (hObject=0x204) returned 1 [0131.626] CloseHandle (hObject=0x1fc) returned 1 [0131.629] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\127__connections_cellular_dna (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0131.630] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0131.630] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="127__C~1.PRO")) returned 0x7d2ad8 [0131.630] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="127__C~1.PRO")) returned 0 [0131.630] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0131.630] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\127__connections_cellular_dna (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0131.632] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\127__connections_cellular_dna (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0131.632] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="128__C~1.PRO")) returned 1 [0131.632] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\128__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0131.632] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0131.632] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c4 [0131.632] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0131.633] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0131.700] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c4, lpOverlapped=0x0) returned 1 [0131.701] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0131.702] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0131.727] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.739] CloseHandle (hObject=0x1fc) returned 1 [0131.739] CloseHandle (hObject=0x204) returned 1 [0131.741] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\128__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0131.741] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0131.741] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="128__C~1.PRO")) returned 0x7d2ad8 [0131.741] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="128__C~1.PRO")) returned 0 [0131.741] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0131.742] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\128__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0131.743] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\128__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0131.743] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="129__C~1.PRO")) returned 1 [0131.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\129__connections_cellular_elisa (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0131.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0131.744] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0131.744] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0131.745] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0131.810] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0131.832] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0131.833] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0131.856] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.867] CloseHandle (hObject=0x204) returned 1 [0131.867] CloseHandle (hObject=0x1fc) returned 1 [0131.868] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\129__connections_cellular_elisa (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0131.869] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0131.869] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="129__C~1.PRO")) returned 0x7d3018 [0131.869] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="129__C~1.PRO")) returned 0 [0131.869] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0131.869] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\129__connections_cellular_elisa (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0131.870] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\129__connections_cellular_elisa (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0131.871] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="12__CO~1.PRO")) returned 1 [0131.871] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\12__connections_cellular_optus (australia)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0131.871] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0131.871] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0131.871] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0131.872] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0131.939] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0131.964] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0131.965] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0131.999] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.013] CloseHandle (hObject=0x1fc) returned 1 [0132.013] CloseHandle (hObject=0x204) returned 1 [0132.014] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\12__connections_cellular_optus (australia)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0132.015] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0132.015] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="12__CO~1.PRO")) returned 0x7d2998 [0132.015] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="12__CO~1.PRO")) returned 0 [0132.015] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0132.015] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\12__connections_cellular_optus (australia)_i3$(__mvid)@wap.provxml")) returned 1 [0132.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\12__connections_cellular_optus (australia)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0132.016] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="130__C~1.PRO")) returned 1 [0132.019] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\130__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0132.020] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0132.020] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0132.020] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0132.021] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0132.142] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0132.154] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0132.155] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0132.181] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.197] CloseHandle (hObject=0x204) returned 1 [0132.197] CloseHandle (hObject=0x1fc) returned 1 [0132.198] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\130__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0132.199] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0132.199] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="130__C~1.PRO")) returned 0x7d2ad8 [0132.199] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="130__C~1.PRO")) returned 0 [0132.199] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0132.199] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\130__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0132.201] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\130__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0132.201] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="131__C~1.PRO")) returned 1 [0132.201] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\131__connections_cellular_go communication ltd. (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0132.201] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0132.201] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29d [0132.201] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0132.202] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0132.270] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29d, lpOverlapped=0x0) returned 1 [0132.308] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0132.309] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0132.372] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.383] CloseHandle (hObject=0x1fc) returned 1 [0132.384] CloseHandle (hObject=0x204) returned 1 [0132.385] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\131__connections_cellular_go communication ltd. (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0132.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0132.385] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="131__C~1.PRO")) returned 0x7d2ad8 [0132.386] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="131__C~1.PRO")) returned 0 [0132.386] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0132.386] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\131__connections_cellular_go communication ltd. (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0132.387] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\131__connections_cellular_go communication ltd. (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0132.387] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="132__C~1.PRO")) returned 1 [0132.387] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\132__connections_cellular_go communication ltd. (finland)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0132.387] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0132.388] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x299 [0132.388] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0132.388] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0132.459] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x299, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x299, lpOverlapped=0x0) returned 1 [0132.511] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0132.512] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0132.621] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.632] CloseHandle (hObject=0x204) returned 1 [0132.633] CloseHandle (hObject=0x1fc) returned 1 [0132.634] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\132__connections_cellular_go communication ltd. (finland)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0132.635] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0132.635] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="132__C~1.PRO")) returned 0x7d29d8 [0132.635] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="132__C~1.PRO")) returned 0 [0132.635] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0132.635] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\132__connections_cellular_go communication ltd. (finland)_i1$(__mvid)@wap.provxml")) returned 1 [0132.636] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\132__connections_cellular_go communication ltd. (finland)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0132.636] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="133__C~1.PRO")) returned 1 [0132.636] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\133__connections_cellular_tdc song finland (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0132.637] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0132.637] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x294 [0132.637] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0132.637] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0132.723] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x294, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x294, lpOverlapped=0x0) returned 1 [0132.781] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0132.782] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0132.806] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.820] CloseHandle (hObject=0x1fc) returned 1 [0132.820] CloseHandle (hObject=0x204) returned 1 [0132.821] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\133__connections_cellular_tdc song finland (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0132.822] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0132.822] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="133__C~1.PRO")) returned 0x7d2918 [0132.822] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="133__C~1.PRO")) returned 0 [0132.822] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0132.822] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\133__connections_cellular_tdc song finland (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0132.823] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\133__connections_cellular_tdc song finland (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0132.823] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="134__C~1.PRO")) returned 1 [0132.824] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\134__connections_cellular_sonera (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0132.825] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0132.825] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x282 [0132.825] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0132.826] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0132.901] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x282, lpOverlapped=0x0) returned 1 [0132.968] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0132.969] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0132.993] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.007] CloseHandle (hObject=0x204) returned 1 [0133.007] CloseHandle (hObject=0x1fc) returned 1 [0133.008] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\134__connections_cellular_sonera (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0133.009] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0133.009] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="134__C~1.PRO")) returned 0x7d3018 [0133.009] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="134__C~1.PRO")) returned 0 [0133.009] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0133.009] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\134__connections_cellular_sonera (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0133.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\134__connections_cellular_sonera (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0133.011] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="135__C~1.PRO")) returned 1 [0133.011] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\135__connections_cellular_bouygues (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0133.011] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0133.012] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0133.012] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0133.012] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0133.079] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0133.169] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0133.170] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0133.194] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.205] CloseHandle (hObject=0x1fc) returned 1 [0133.205] CloseHandle (hObject=0x204) returned 1 [0133.210] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\135__connections_cellular_bouygues (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0133.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0133.211] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="135__C~1.PRO")) returned 0x7d3018 [0133.211] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="135__C~1.PRO")) returned 0 [0133.211] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0133.211] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\135__connections_cellular_bouygues (france)_i0$(__mvid)@wap.provxml")) returned 1 [0133.212] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\135__connections_cellular_bouygues (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0133.212] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="136__C~1.PRO")) returned 1 [0133.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\136__connections_cellular_bouygues (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0133.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0133.213] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0133.213] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0133.214] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0133.292] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0133.401] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0133.403] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0133.426] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.438] CloseHandle (hObject=0x204) returned 1 [0133.438] CloseHandle (hObject=0x1fc) returned 1 [0133.445] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\136__connections_cellular_bouygues (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0133.447] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0133.447] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="136__C~1.PRO")) returned 0x7d3018 [0133.447] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="136__C~1.PRO")) returned 0 [0133.447] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0133.447] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\136__connections_cellular_bouygues (france)_i1$(__mvid)@wap.provxml")) returned 1 [0133.448] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\136__connections_cellular_bouygues (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0133.449] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="137__C~1.PRO")) returned 1 [0133.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\137__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0133.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0133.450] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d7 [0133.450] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0133.450] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0133.616] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d7, lpOverlapped=0x0) returned 1 [0133.617] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0133.618] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0133.675] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.686] CloseHandle (hObject=0x1fc) returned 1 [0133.686] CloseHandle (hObject=0x204) returned 1 [0133.688] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\137__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0133.689] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0133.689] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="137__C~1.PRO")) returned 0x7d2ad8 [0133.689] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="137__C~1.PRO")) returned 0 [0133.689] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0133.689] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\137__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0133.690] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\137__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0133.690] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="138__C~1.PRO")) returned 1 [0133.691] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\138__connections_cellular_free mobile (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0133.691] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0133.691] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c4 [0133.691] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0133.692] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0133.763] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c4, lpOverlapped=0x0) returned 1 [0133.851] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0133.852] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0133.875] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.886] CloseHandle (hObject=0x204) returned 1 [0133.887] CloseHandle (hObject=0x1fc) returned 1 [0133.888] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\138__connections_cellular_free mobile (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0133.889] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0133.889] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="138__C~1.PRO")) returned 0x7d2d58 [0133.889] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="138__C~1.PRO")) returned 0 [0133.889] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0133.889] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\138__connections_cellular_free mobile (france)_i0$(__mvid)@wap.provxml")) returned 1 [0133.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\138__connections_cellular_free mobile (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0133.891] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="139__C~1.PRO")) returned 1 [0133.891] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\139__connections_cellular_orange (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0133.891] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0133.897] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0133.897] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0133.897] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0133.968] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0133.970] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0133.971] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0134.016] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.027] CloseHandle (hObject=0x1fc) returned 1 [0134.027] CloseHandle (hObject=0x204) returned 1 [0134.029] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\139__connections_cellular_orange (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0134.030] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0134.030] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="139__C~1.PRO")) returned 0x7d2ad8 [0134.030] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="139__C~1.PRO")) returned 0 [0134.030] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0134.030] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\139__connections_cellular_orange (france)_i0$(__mvid)@wap.provxml")) returned 1 [0134.031] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\139__connections_cellular_orange (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0134.031] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="13__CO~1.PRO")) returned 1 [0134.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\13__connections_cellular_optus (australia)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0134.032] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0134.032] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0134.032] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0134.033] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0134.099] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0134.165] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0134.166] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0134.189] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.200] CloseHandle (hObject=0x204) returned 1 [0134.201] CloseHandle (hObject=0x1fc) returned 1 [0134.202] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\13__connections_cellular_optus (australia)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0134.203] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0134.203] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="13__CO~1.PRO")) returned 0x7d2a58 [0134.203] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="13__CO~1.PRO")) returned 0 [0134.203] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0134.203] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\13__connections_cellular_optus (australia)_i4$(__mvid)@wap.provxml")) returned 1 [0134.204] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\13__connections_cellular_optus (australia)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0134.204] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="140__C~1.PRO")) returned 1 [0134.205] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\140__connections_cellular_orange (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0134.205] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0134.209] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34e [0134.209] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0134.210] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0134.318] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34e, lpOverlapped=0x0) returned 1 [0134.354] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0134.355] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0134.378] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.389] CloseHandle (hObject=0x1fc) returned 1 [0134.389] CloseHandle (hObject=0x204) returned 1 [0134.391] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\140__connections_cellular_orange (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0134.391] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0134.392] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="140__C~1.PRO")) returned 0x7d2c98 [0134.392] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="140__C~1.PRO")) returned 0 [0134.392] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0134.392] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\140__connections_cellular_orange (france)_i1$(__mvid)@wap.provxml")) returned 1 [0134.395] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\140__connections_cellular_orange (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0134.395] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="141__C~1.PRO")) returned 1 [0134.395] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\141__connections_cellular_orange (france)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0134.396] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0134.397] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x356 [0134.397] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0134.397] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0134.465] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x356, lpOverlapped=0x0) returned 1 [0134.468] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0134.469] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0134.496] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.514] CloseHandle (hObject=0x204) returned 1 [0134.514] CloseHandle (hObject=0x1fc) returned 1 [0134.516] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\141__connections_cellular_orange (france)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0134.516] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0134.516] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="141__C~1.PRO")) returned 0x7d3098 [0134.517] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="141__C~1.PRO")) returned 0 [0134.517] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0134.517] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\141__connections_cellular_orange (france)_i2$(__mvid)@wap.provxml")) returned 1 [0134.518] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\141__connections_cellular_orange (france)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0134.518] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="142__C~1.PRO")) returned 1 [0134.518] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\142__connections_cellular_orange (france)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0134.518] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0134.519] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34a [0134.519] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0134.519] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0134.652] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34a, lpOverlapped=0x0) returned 1 [0134.655] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0134.656] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0134.680] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.887] CloseHandle (hObject=0x1fc) returned 1 [0134.888] CloseHandle (hObject=0x204) returned 1 [0134.889] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\142__connections_cellular_orange (france)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0134.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0134.890] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="142__C~1.PRO")) returned 0x7d3018 [0134.890] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="142__C~1.PRO")) returned 0 [0134.890] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0134.890] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\142__connections_cellular_orange (france)_i3$(__mvid)@wap.provxml")) returned 1 [0134.891] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\142__connections_cellular_orange (france)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0134.891] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", cAlternateFileName="143__C~1.PRO")) returned 1 [0134.892] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\143__connections_cellular_orange (france)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0134.892] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0134.892] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x346 [0134.892] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0134.893] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0134.960] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x346, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x346, lpOverlapped=0x0) returned 1 [0134.966] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0134.967] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0134.990] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.001] CloseHandle (hObject=0x204) returned 1 [0135.001] CloseHandle (hObject=0x1fc) returned 1 [0135.003] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\143__connections_cellular_orange (france)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.004] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.004] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", cAlternateFileName="143__C~1.PRO")) returned 0x7d2998 [0135.004] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", cAlternateFileName="143__C~1.PRO")) returned 0 [0135.004] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0135.004] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\143__connections_cellular_orange (france)_i4$(__mvid)@wap.provxml")) returned 1 [0135.005] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\143__connections_cellular_orange (france)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0135.005] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", cAlternateFileName="144__C~1.PRO")) returned 1 [0135.006] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\144__connections_cellular_orange (france)_i5$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.006] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.006] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34f [0135.006] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.006] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.077] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34f, lpOverlapped=0x0) returned 1 [0135.078] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0135.083] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0135.106] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.117] CloseHandle (hObject=0x1fc) returned 1 [0135.117] CloseHandle (hObject=0x204) returned 1 [0135.119] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\144__connections_cellular_orange (france)_i5$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.119] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.119] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", cAlternateFileName="144__C~1.PRO")) returned 0x7d2998 [0135.119] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", cAlternateFileName="144__C~1.PRO")) returned 0 [0135.119] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0135.119] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\144__connections_cellular_orange (france)_i5$(__mvid)@wap.provxml")) returned 1 [0135.121] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\144__connections_cellular_orange (france)_i5$(__mvid)@wap.provxml")) returned 0xffffffff [0135.121] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", cAlternateFileName="145__C~1.PRO")) returned 1 [0135.121] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\145__connections_cellular_orange (france)_i6$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.121] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.121] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34a [0135.121] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.122] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.227] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34a, lpOverlapped=0x0) returned 1 [0135.229] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0135.230] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0135.252] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.263] CloseHandle (hObject=0x204) returned 1 [0135.264] CloseHandle (hObject=0x1fc) returned 1 [0135.265] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\145__connections_cellular_orange (france)_i6$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.265] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.265] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", cAlternateFileName="145__C~1.PRO")) returned 0x7d2d58 [0135.265] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", cAlternateFileName="145__C~1.PRO")) returned 0 [0135.266] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0135.266] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\145__connections_cellular_orange (france)_i6$(__mvid)@wap.provxml")) returned 1 [0135.267] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\145__connections_cellular_orange (france)_i6$(__mvid)@wap.provxml")) returned 0xffffffff [0135.267] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="146__C~1.PRO")) returned 1 [0135.270] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\146__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.271] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.271] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0135.271] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.272] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.337] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0135.339] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0135.340] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0135.363] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.374] CloseHandle (hObject=0x1fc) returned 1 [0135.374] CloseHandle (hObject=0x204) returned 1 [0135.376] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\146__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.376] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.376] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="146__C~1.PRO")) returned 0x7d2b58 [0135.377] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="146__C~1.PRO")) returned 0 [0135.377] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0135.377] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\146__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml")) returned 1 [0135.378] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\146__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0135.378] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="147__C~1.PRO")) returned 1 [0135.379] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\147__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.379] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.379] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0135.379] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.379] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.449] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0135.450] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0135.451] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0135.474] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.485] CloseHandle (hObject=0x204) returned 1 [0135.485] CloseHandle (hObject=0x1fc) returned 1 [0135.488] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\147__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.489] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="147__C~1.PRO")) returned 0x7d2918 [0135.489] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="147__C~1.PRO")) returned 0 [0135.489] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0135.489] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\147__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml")) returned 1 [0135.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\147__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0135.490] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="148__C~1.PRO")) returned 1 [0135.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\148__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.491] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0135.491] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.637] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0135.639] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0135.640] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0135.665] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.676] CloseHandle (hObject=0x1fc) returned 1 [0135.676] CloseHandle (hObject=0x204) returned 1 [0135.678] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\148__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.678] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.678] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="148__C~1.PRO")) returned 0x7d2a18 [0135.678] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="148__C~1.PRO")) returned 0 [0135.678] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0135.679] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\148__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml")) returned 1 [0135.680] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\148__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0135.680] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="149__C~1.PRO")) returned 1 [0135.680] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\149__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.680] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.680] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0135.681] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.681] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.747] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0135.750] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0135.751] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0135.774] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.786] CloseHandle (hObject=0x204) returned 1 [0135.786] CloseHandle (hObject=0x1fc) returned 1 [0135.788] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\149__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0135.789] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0135.789] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="149__C~1.PRO")) returned 0x7d2ad8 [0135.789] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="149__C~1.PRO")) returned 0 [0135.789] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0135.789] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\149__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml")) returned 1 [0135.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\149__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0135.790] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="14__CO~1.PRO")) returned 1 [0135.790] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\14__connections_cellular_optus (australia)_i5$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0135.791] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0135.791] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0135.791] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0135.791] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0135.857] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0135.859] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0135.860] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.024] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.035] CloseHandle (hObject=0x1fc) returned 1 [0136.035] CloseHandle (hObject=0x204) returned 1 [0136.037] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\14__connections_cellular_optus (australia)_i5$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0136.037] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0136.037] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="14__CO~1.PRO")) returned 0x7d3018 [0136.037] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="14__CO~1.PRO")) returned 0 [0136.037] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0136.038] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\14__connections_cellular_optus (australia)_i5$(__mvid)@wap.provxml")) returned 1 [0136.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\14__connections_cellular_optus (australia)_i5$(__mvid)@wap.provxml")) returned 0xffffffff [0136.039] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="150__C~1.PRO")) returned 1 [0136.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\150__connections_cellular_e-plus (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.040] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x356 [0136.040] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.040] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0136.199] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x356, lpOverlapped=0x0) returned 1 [0136.202] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0136.203] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.228] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.240] CloseHandle (hObject=0x204) returned 1 [0136.240] CloseHandle (hObject=0x1fc) returned 1 [0136.241] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\150__connections_cellular_e-plus (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0136.242] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0136.242] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="150__C~1.PRO")) returned 0x7d2c98 [0136.242] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="150__C~1.PRO")) returned 0 [0136.242] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0136.242] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\150__connections_cellular_e-plus (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0136.244] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\150__connections_cellular_e-plus (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0136.244] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="151__C~1.PRO")) returned 1 [0136.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\151__connections_cellular_deutsche telekom (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.244] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35f [0136.244] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.245] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0136.323] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35f, lpOverlapped=0x0) returned 1 [0136.324] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0136.325] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.349] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.361] CloseHandle (hObject=0x1fc) returned 1 [0136.361] CloseHandle (hObject=0x204) returned 1 [0136.363] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\151__connections_cellular_deutsche telekom (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0136.364] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0136.364] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="151__C~1.PRO")) returned 0x7d3018 [0136.364] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="151__C~1.PRO")) returned 0 [0136.364] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0136.364] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\151__connections_cellular_deutsche telekom (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0136.365] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\151__connections_cellular_deutsche telekom (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0136.365] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="152__C~1.PRO")) returned 1 [0136.365] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\152__connections_cellular_vodafone.de (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.366] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.366] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0136.366] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.367] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0136.436] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0136.439] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0136.440] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.464] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.474] CloseHandle (hObject=0x204) returned 1 [0136.475] CloseHandle (hObject=0x1fc) returned 1 [0136.487] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\152__connections_cellular_vodafone.de (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0136.488] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0136.488] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="152__C~1.PRO")) returned 0x7d2a18 [0136.488] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="152__C~1.PRO")) returned 0 [0136.488] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0136.489] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\152__connections_cellular_vodafone.de (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0136.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\152__connections_cellular_vodafone.de (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0136.490] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", cAlternateFileName="153__C~1.PRO")) returned 1 [0136.490] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\153__connections_cellular_vodafone.de (germany)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.490] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.491] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d8 [0136.491] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.491] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0136.654] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d8, lpOverlapped=0x0) returned 1 [0136.661] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0136.662] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.686] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.704] CloseHandle (hObject=0x1fc) returned 1 [0136.704] CloseHandle (hObject=0x204) returned 1 [0136.708] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\153__connections_cellular_vodafone.de (germany)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0136.709] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0136.709] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", cAlternateFileName="153__C~1.PRO")) returned 0x7d2cd8 [0136.709] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", cAlternateFileName="153__C~1.PRO")) returned 0 [0136.709] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0136.709] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\153__connections_cellular_vodafone.de (germany)_i1$(__mvid)@wap.provxml")) returned 1 [0136.711] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\153__connections_cellular_vodafone.de (germany)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0136.711] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="154__C~1.PRO")) returned 1 [0136.711] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\154__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.711] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.712] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0136.712] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.713] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0136.807] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0136.808] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0136.809] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.832] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.843] CloseHandle (hObject=0x204) returned 1 [0136.843] CloseHandle (hObject=0x1fc) returned 1 [0136.845] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\154__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0136.845] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0136.845] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="154__C~1.PRO")) returned 0x7d3018 [0136.845] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="154__C~1.PRO")) returned 0 [0136.845] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0136.846] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\154__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0136.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\154__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0136.847] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="155__C~1.PRO")) returned 1 [0136.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\155__connections_cellular_vodafone ghana (ghana)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.847] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0136.848] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.848] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0136.916] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0136.918] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0136.919] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0136.942] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.955] CloseHandle (hObject=0x1fc) returned 1 [0136.956] CloseHandle (hObject=0x204) returned 1 [0136.957] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\155__connections_cellular_vodafone ghana (ghana)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0136.957] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0136.958] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="155__C~1.PRO")) returned 0x7d3018 [0136.958] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="155__C~1.PRO")) returned 0 [0136.958] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0136.958] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\155__connections_cellular_vodafone ghana (ghana)_i0$(__mvid)@wap.provxml")) returned 1 [0136.959] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\155__connections_cellular_vodafone ghana (ghana)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0136.959] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="156__C~1.PRO")) returned 1 [0136.959] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\156__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0136.960] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0136.960] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0136.960] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0136.960] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.027] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0137.029] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0137.030] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.052] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.064] CloseHandle (hObject=0x204) returned 1 [0137.064] CloseHandle (hObject=0x1fc) returned 1 [0137.065] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\156__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0137.066] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0137.066] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="156__C~1.PRO")) returned 0x7d2c58 [0137.066] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="156__C~1.PRO")) returned 0 [0137.066] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0137.066] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\156__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0137.067] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\156__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0137.068] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="157__C~1.PRO")) returned 1 [0137.068] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\157__connections_cellular_cosmote greece (greece)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.068] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.068] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0137.068] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.069] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.218] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0137.221] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0137.222] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.246] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.257] CloseHandle (hObject=0x1fc) returned 1 [0137.257] CloseHandle (hObject=0x204) returned 1 [0137.261] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\157__connections_cellular_cosmote greece (greece)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0137.261] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0137.261] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="157__C~1.PRO")) returned 0x7d2998 [0137.261] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="157__C~1.PRO")) returned 0 [0137.261] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0137.262] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\157__connections_cellular_cosmote greece (greece)_i0$(__mvid)@wap.provxml")) returned 1 [0137.263] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\157__connections_cellular_cosmote greece (greece)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0137.263] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="158__C~1.PRO")) returned 1 [0137.263] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\158__connections_cellular_q-telecom (greece)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.263] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.264] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x284 [0137.264] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.264] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.341] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x284, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x284, lpOverlapped=0x0) returned 1 [0137.343] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0137.344] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.367] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.378] CloseHandle (hObject=0x204) returned 1 [0137.379] CloseHandle (hObject=0x1fc) returned 1 [0137.381] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\158__connections_cellular_q-telecom (greece)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0137.381] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0137.381] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="158__C~1.PRO")) returned 0x7d2b98 [0137.381] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="158__C~1.PRO")) returned 0 [0137.382] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0137.382] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\158__connections_cellular_q-telecom (greece)_i0$(__mvid)@wap.provxml")) returned 1 [0137.383] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\158__connections_cellular_q-telecom (greece)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0137.383] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="159__C~1.PRO")) returned 1 [0137.383] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\159__connections_cellular_telestet (stet) (greece)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.383] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.385] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0137.385] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.385] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.460] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0137.462] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0137.463] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.489] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.500] CloseHandle (hObject=0x1fc) returned 1 [0137.500] CloseHandle (hObject=0x204) returned 1 [0137.501] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\159__connections_cellular_telestet (stet) (greece)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0137.502] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0137.502] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="159__C~1.PRO")) returned 0x7d2b58 [0137.502] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="159__C~1.PRO")) returned 0 [0137.502] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0137.502] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\159__connections_cellular_telestet (stet) (greece)_i0$(__mvid)@wap.provxml")) returned 1 [0137.503] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\159__connections_cellular_telestet (stet) (greece)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0137.503] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", cAlternateFileName="15__CO~1.PRO")) returned 1 [0137.504] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\15__connections_cellular_optus (australia)_i6$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.505] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.506] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0137.506] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.506] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.653] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0137.655] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0137.657] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.681] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.692] CloseHandle (hObject=0x204) returned 1 [0137.692] CloseHandle (hObject=0x1fc) returned 1 [0137.693] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\15__connections_cellular_optus (australia)_i6$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0137.694] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0137.694] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", cAlternateFileName="15__CO~1.PRO")) returned 0x7d3018 [0137.694] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", cAlternateFileName="15__CO~1.PRO")) returned 0 [0137.694] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0137.694] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\15__connections_cellular_optus (australia)_i6$(__mvid)@wap.provxml")) returned 1 [0137.695] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\15__connections_cellular_optus (australia)_i6$(__mvid)@wap.provxml")) returned 0xffffffff [0137.695] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="160__C~1.PRO")) returned 1 [0137.695] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\160__connections_cellular_telestet (stet) (greece)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.696] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.696] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0137.696] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.696] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.762] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0137.767] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0137.768] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.791] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.803] CloseHandle (hObject=0x1fc) returned 1 [0137.803] CloseHandle (hObject=0x204) returned 1 [0137.804] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\160__connections_cellular_telestet (stet) (greece)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0137.805] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0137.805] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="160__C~1.PRO")) returned 0x7d2c98 [0137.805] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="160__C~1.PRO")) returned 0 [0137.805] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0137.805] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\160__connections_cellular_telestet (stet) (greece)_i1$(__mvid)@wap.provxml")) returned 1 [0137.806] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\160__connections_cellular_telestet (stet) (greece)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0137.806] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="161__C~1.PRO")) returned 1 [0137.840] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\161__connections_cellular_vodafone greece (greece)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.840] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.841] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0137.841] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.842] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0137.909] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0137.911] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0137.912] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0137.936] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.947] CloseHandle (hObject=0x204) returned 1 [0137.947] CloseHandle (hObject=0x1fc) returned 1 [0137.948] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\161__connections_cellular_vodafone greece (greece)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0137.949] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0137.949] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="161__C~1.PRO")) returned 0x7d2b58 [0137.949] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="161__C~1.PRO")) returned 0 [0137.949] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0137.949] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\161__connections_cellular_vodafone greece (greece)_i0$(__mvid)@wap.provxml")) returned 1 [0137.951] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\161__connections_cellular_vodafone greece (greece)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0137.951] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="162__C~1.PRO")) returned 1 [0137.951] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\162__connections_cellular_vodafone greece (greece)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0137.951] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0137.952] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2df [0137.952] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0137.952] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.025] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2df, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2df, lpOverlapped=0x0) returned 1 [0138.027] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0138.028] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.052] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.063] CloseHandle (hObject=0x1fc) returned 1 [0138.063] CloseHandle (hObject=0x204) returned 1 [0138.065] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\162__connections_cellular_vodafone greece (greece)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0138.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0138.069] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="162__C~1.PRO")) returned 0x7d3018 [0138.069] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="162__C~1.PRO")) returned 0 [0138.069] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0138.069] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\162__connections_cellular_vodafone greece (greece)_i1$(__mvid)@wap.provxml")) returned 1 [0138.070] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\162__connections_cellular_vodafone greece (greece)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0138.070] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="163__C~1.PRO")) returned 1 [0138.071] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\163__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.071] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.072] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0138.072] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.072] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.167] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0138.177] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0138.178] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.200] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.211] CloseHandle (hObject=0x204) returned 1 [0138.211] CloseHandle (hObject=0x1fc) returned 1 [0138.212] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\163__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0138.213] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0138.213] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="163__C~1.PRO")) returned 0x7d3098 [0138.213] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="163__C~1.PRO")) returned 0 [0138.213] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0138.213] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\163__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0138.214] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\163__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0138.214] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="164__C~1.PRO")) returned 1 [0138.215] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\164__connections_cellular_orange caraïbe (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.215] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.215] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0138.215] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.215] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.282] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0138.283] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0138.285] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.307] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.319] CloseHandle (hObject=0x1fc) returned 1 [0138.319] CloseHandle (hObject=0x204) returned 1 [0138.321] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\164__connections_cellular_orange caraïbe (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0138.322] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0138.322] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="164__C~1.PRO")) returned 0x7d3018 [0138.322] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="164__C~1.PRO")) returned 0 [0138.322] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0138.322] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\164__connections_cellular_orange caraïbe (france)_i0$(__mvid)@wap.provxml")) returned 1 [0138.323] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\164__connections_cellular_orange caraïbe (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0138.323] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="165__C~1.PRO")) returned 1 [0138.323] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\165__connections_cellular_claro (guatemala)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.324] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bf [0138.324] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.324] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.426] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bf, lpOverlapped=0x0) returned 1 [0138.428] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0138.429] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.453] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.464] CloseHandle (hObject=0x204) returned 1 [0138.465] CloseHandle (hObject=0x1fc) returned 1 [0138.466] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\165__connections_cellular_claro (guatemala)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0138.467] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0138.467] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="165__C~1.PRO")) returned 0x7d2c98 [0138.467] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="165__C~1.PRO")) returned 0 [0138.467] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0138.467] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\165__connections_cellular_claro (guatemala)_i0$(__mvid)@wap.provxml")) returned 1 [0138.468] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\165__connections_cellular_claro (guatemala)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0138.468] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="166__C~1.PRO")) returned 1 [0138.468] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\166__connections_cellular_claro (guatemala)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.469] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.469] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0138.469] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.470] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.537] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28e, lpOverlapped=0x0) returned 1 [0138.539] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0138.540] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.626] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.637] CloseHandle (hObject=0x1fc) returned 1 [0138.637] CloseHandle (hObject=0x204) returned 1 [0138.638] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\166__connections_cellular_claro (guatemala)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0138.639] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0138.639] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="166__C~1.PRO")) returned 0x7d2cd8 [0138.639] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="166__C~1.PRO")) returned 0 [0138.639] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0138.639] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\166__connections_cellular_claro (guatemala)_i1$(__mvid)@wap.provxml")) returned 1 [0138.640] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\166__connections_cellular_claro (guatemala)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0138.640] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="167__C~1.PRO")) returned 1 [0138.641] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\167__connections_cellular_telefonica (guatemala)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.642] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.642] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d9 [0138.642] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.642] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.710] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d9, lpOverlapped=0x0) returned 1 [0138.715] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0138.716] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.743] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.755] CloseHandle (hObject=0x204) returned 1 [0138.755] CloseHandle (hObject=0x1fc) returned 1 [0138.756] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\167__connections_cellular_telefonica (guatemala)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0138.757] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0138.757] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="167__C~1.PRO")) returned 0x7d2ad8 [0138.757] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="167__C~1.PRO")) returned 0 [0138.757] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0138.757] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\167__connections_cellular_telefonica (guatemala)_i0$(__mvid)@wap.provxml")) returned 1 [0138.758] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\167__connections_cellular_telefonica (guatemala)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0138.759] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="168__C~1.PRO")) returned 1 [0138.759] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\168__connections_cellular_tigo (guatemala)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.759] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.759] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28b [0138.760] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.760] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.856] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28b, lpOverlapped=0x0) returned 1 [0138.858] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0138.859] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.883] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.894] CloseHandle (hObject=0x1fc) returned 1 [0138.894] CloseHandle (hObject=0x204) returned 1 [0138.897] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\168__connections_cellular_tigo (guatemala)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0138.897] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0138.897] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="168__C~1.PRO")) returned 0x7d2a58 [0138.898] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="168__C~1.PRO")) returned 0 [0138.898] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0138.898] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\168__connections_cellular_tigo (guatemala)_i0$(__mvid)@wap.provxml")) returned 1 [0138.899] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\168__connections_cellular_tigo (guatemala)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0138.899] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="169__C~1.PRO")) returned 1 [0138.899] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\169__connections_cellular_tigo (guatemala)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0138.899] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0138.900] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0138.900] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0138.900] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0138.968] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0138.971] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0138.973] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0138.995] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.006] CloseHandle (hObject=0x204) returned 1 [0139.007] CloseHandle (hObject=0x1fc) returned 1 [0139.008] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\169__connections_cellular_tigo (guatemala)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0139.008] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0139.009] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="169__C~1.PRO")) returned 0x7d3018 [0139.009] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="169__C~1.PRO")) returned 0 [0139.009] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0139.009] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\169__connections_cellular_tigo (guatemala)_i1$(__mvid)@wap.provxml")) returned 1 [0139.010] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\169__connections_cellular_tigo (guatemala)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0139.010] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", cAlternateFileName="16__CO~1.PRO")) returned 1 [0139.010] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\16__connections_cellular_optus (australia)_i7$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.011] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.011] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0139.011] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.011] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.110] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0139.112] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0139.113] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0139.138] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.149] CloseHandle (hObject=0x1fc) returned 1 [0139.149] CloseHandle (hObject=0x204) returned 1 [0139.151] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\16__connections_cellular_optus (australia)_i7$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0139.152] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0139.152] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", cAlternateFileName="16__CO~1.PRO")) returned 0x7d3018 [0139.152] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", cAlternateFileName="16__CO~1.PRO")) returned 0 [0139.152] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0139.152] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\16__connections_cellular_optus (australia)_i7$(__mvid)@wap.provxml")) returned 1 [0139.153] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\16__connections_cellular_optus (australia)_i7$(__mvid)@wap.provxml")) returned 0xffffffff [0139.153] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="170__C~1.PRO")) returned 1 [0139.154] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\170__connections_cellular_claro (honduras)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.154] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.155] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0139.155] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.155] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.255] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0139.257] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0139.258] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0139.281] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.294] CloseHandle (hObject=0x204) returned 1 [0139.294] CloseHandle (hObject=0x1fc) returned 1 [0139.295] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\170__connections_cellular_claro (honduras)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0139.296] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0139.296] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="170__C~1.PRO")) returned 0x7d2c18 [0139.296] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="170__C~1.PRO")) returned 0 [0139.296] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0139.296] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\170__connections_cellular_claro (honduras)_i0$(__mvid)@wap.provxml")) returned 1 [0139.298] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\170__connections_cellular_claro (honduras)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0139.298] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="171__C~1.PRO")) returned 1 [0139.298] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\171__connections_cellular_claro (honduras)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.299] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.299] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0139.299] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.299] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.366] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0139.370] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0139.371] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0139.394] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.405] CloseHandle (hObject=0x1fc) returned 1 [0139.406] CloseHandle (hObject=0x204) returned 1 [0139.408] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\171__connections_cellular_claro (honduras)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0139.408] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0139.408] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="171__C~1.PRO")) returned 0x7d3018 [0139.409] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="171__C~1.PRO")) returned 0 [0139.409] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0139.409] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\171__connections_cellular_claro (honduras)_i1$(__mvid)@wap.provxml")) returned 1 [0139.410] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\171__connections_cellular_claro (honduras)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0139.410] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="172__C~1.PRO")) returned 1 [0139.410] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\172__connections_cellular_tigo (honduras)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.410] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.411] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0139.411] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.411] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.637] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0139.639] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0139.640] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0139.663] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.675] CloseHandle (hObject=0x204) returned 1 [0139.675] CloseHandle (hObject=0x1fc) returned 1 [0139.677] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\172__connections_cellular_tigo (honduras)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0139.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0139.677] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="172__C~1.PRO")) returned 0x7d2a18 [0139.678] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="172__C~1.PRO")) returned 0 [0139.678] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0139.678] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\172__connections_cellular_tigo (honduras)_i0$(__mvid)@wap.provxml")) returned 1 [0139.679] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\172__connections_cellular_tigo (honduras)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0139.679] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="173__C~1.PRO")) returned 1 [0139.679] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\173__connections_cellular_tigo (honduras)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.679] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.680] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x289 [0139.680] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.680] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.748] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x289, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x289, lpOverlapped=0x0) returned 1 [0139.750] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0139.751] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0139.775] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.786] CloseHandle (hObject=0x1fc) returned 1 [0139.786] CloseHandle (hObject=0x204) returned 1 [0139.788] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\173__connections_cellular_tigo (honduras)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0139.788] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0139.788] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="173__C~1.PRO")) returned 0x7d3018 [0139.789] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="173__C~1.PRO")) returned 0 [0139.789] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0139.789] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\173__connections_cellular_tigo (honduras)_i1$(__mvid)@wap.provxml")) returned 1 [0139.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\173__connections_cellular_tigo (honduras)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0139.790] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="174__C~1.PRO")) returned 1 [0139.790] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\174__connections_cellular_csl (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.790] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.791] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x282 [0139.791] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.791] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.858] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x282, lpOverlapped=0x0) returned 1 [0139.860] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0139.861] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0139.884] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.895] CloseHandle (hObject=0x204) returned 1 [0139.896] CloseHandle (hObject=0x1fc) returned 1 [0139.897] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\174__connections_cellular_csl (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0139.897] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0139.898] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="174__C~1.PRO")) returned 0x7d2a18 [0139.898] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="174__C~1.PRO")) returned 0 [0139.898] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0139.898] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\174__connections_cellular_csl (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0139.899] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\174__connections_cellular_csl (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0139.899] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="175__C~1.PRO")) returned 1 [0139.899] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\175__connections_cellular_3 (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0139.899] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0139.900] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0139.900] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0139.900] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0139.994] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0139.996] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0139.998] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0140.021] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.036] CloseHandle (hObject=0x1fc) returned 1 [0140.036] CloseHandle (hObject=0x204) returned 1 [0140.039] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\175__connections_cellular_3 (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0140.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0140.040] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="175__C~1.PRO")) returned 0x7d3018 [0140.040] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="175__C~1.PRO")) returned 0 [0140.040] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0140.040] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\175__connections_cellular_3 (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0140.041] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\175__connections_cellular_3 (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0140.041] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", cAlternateFileName="176__C~1.PRO")) returned 1 [0140.041] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\176__connections_cellular_3 (hong kong sar)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0140.041] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0140.042] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0140.042] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0140.042] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0140.144] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0140.146] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0140.147] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0140.170] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.181] CloseHandle (hObject=0x204) returned 1 [0140.182] CloseHandle (hObject=0x1fc) returned 1 [0140.184] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\176__connections_cellular_3 (hong kong sar)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0140.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0140.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", cAlternateFileName="176__C~1.PRO")) returned 0x7d2918 [0140.185] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", cAlternateFileName="176__C~1.PRO")) returned 0 [0140.185] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0140.185] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\176__connections_cellular_3 (hong kong sar)_i1$(__mvid)@wap.provxml")) returned 1 [0140.187] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\176__connections_cellular_3 (hong kong sar)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0140.187] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", cAlternateFileName="177__C~1.PRO")) returned 1 [0140.192] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\177__connections_cellular_3 (hong kong sar)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0140.192] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0140.193] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0140.193] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0140.193] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0140.262] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0140.263] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0140.264] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0140.290] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.302] CloseHandle (hObject=0x1fc) returned 1 [0140.302] CloseHandle (hObject=0x204) returned 1 [0140.303] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\177__connections_cellular_3 (hong kong sar)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0140.304] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0140.304] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", cAlternateFileName="177__C~1.PRO")) returned 0x7d3018 [0140.304] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", cAlternateFileName="177__C~1.PRO")) returned 0 [0140.304] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0140.304] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\177__connections_cellular_3 (hong kong sar)_i2$(__mvid)@wap.provxml")) returned 1 [0140.305] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\177__connections_cellular_3 (hong kong sar)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0140.306] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", cAlternateFileName="178__C~1.PRO")) returned 1 [0140.306] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\178__connections_cellular_3 (hong kong sar)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0140.306] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0140.318] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d9 [0140.318] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0140.319] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0140.419] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d9, lpOverlapped=0x0) returned 1 [0140.421] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0140.422] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0140.446] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.457] CloseHandle (hObject=0x204) returned 1 [0140.457] CloseHandle (hObject=0x1fc) returned 1 [0140.459] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\178__connections_cellular_3 (hong kong sar)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0140.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0140.459] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", cAlternateFileName="178__C~1.PRO")) returned 0x7d3018 [0140.459] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", cAlternateFileName="178__C~1.PRO")) returned 0 [0140.459] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0140.460] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\178__connections_cellular_3 (hong kong sar)_i3$(__mvid)@wap.provxml")) returned 1 [0140.461] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\178__connections_cellular_3 (hong kong sar)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0140.461] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", cAlternateFileName="179__C~1.PRO")) returned 1 [0140.461] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\179__connections_cellular_3 (hong kong sar)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0140.461] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0140.461] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0140.461] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0140.462] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0140.752] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0140.753] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0140.754] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0140.779] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.790] CloseHandle (hObject=0x1fc) returned 1 [0140.790] CloseHandle (hObject=0x204) returned 1 [0140.792] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\179__connections_cellular_3 (hong kong sar)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0140.793] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0140.793] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", cAlternateFileName="179__C~1.PRO")) returned 0x7d29d8 [0140.793] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", cAlternateFileName="179__C~1.PRO")) returned 0 [0140.793] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0140.793] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\179__connections_cellular_3 (hong kong sar)_i4$(__mvid)@wap.provxml")) returned 1 [0140.794] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\179__connections_cellular_3 (hong kong sar)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0140.794] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", cAlternateFileName="17__CO~1.PRO")) returned 1 [0140.795] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\17__connections_cellular_optus (australia)_i8$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0140.795] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0140.795] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0140.795] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0140.796] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0140.864] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0140.866] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0140.867] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0140.889] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.900] CloseHandle (hObject=0x204) returned 1 [0140.901] CloseHandle (hObject=0x1fc) returned 1 [0140.903] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\17__connections_cellular_optus (australia)_i8$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0140.904] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0140.904] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", cAlternateFileName="17__CO~1.PRO")) returned 0x7d2998 [0140.904] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", cAlternateFileName="17__CO~1.PRO")) returned 0 [0140.904] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0140.904] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\17__connections_cellular_optus (australia)_i8$(__mvid)@wap.provxml")) returned 1 [0140.905] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\17__connections_cellular_optus (australia)_i8$(__mvid)@wap.provxml")) returned 0xffffffff [0140.905] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", cAlternateFileName="180__C~1.PRO")) returned 1 [0140.905] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\180__connections_cellular_3 (hong kong sar)_i5$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0140.906] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0140.906] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0140.906] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0140.910] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0140.975] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0140.977] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0140.978] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0141.001] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.012] CloseHandle (hObject=0x1fc) returned 1 [0141.012] CloseHandle (hObject=0x204) returned 1 [0141.014] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\180__connections_cellular_3 (hong kong sar)_i5$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0141.015] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0141.015] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", cAlternateFileName="180__C~1.PRO")) returned 0x7d2cd8 [0141.015] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", cAlternateFileName="180__C~1.PRO")) returned 0 [0141.015] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0141.015] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\180__connections_cellular_3 (hong kong sar)_i5$(__mvid)@wap.provxml")) returned 1 [0141.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\180__connections_cellular_3 (hong kong sar)_i5$(__mvid)@wap.provxml")) returned 0xffffffff [0141.016] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="181__C~1.PRO")) returned 1 [0141.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\181__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0141.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0141.018] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0141.018] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0141.018] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0141.112] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0141.114] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0141.115] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0141.138] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.150] CloseHandle (hObject=0x204) returned 1 [0141.151] CloseHandle (hObject=0x1fc) returned 1 [0141.152] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\181__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0141.153] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0141.153] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="181__C~1.PRO")) returned 0x7d2c98 [0141.153] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="181__C~1.PRO")) returned 0 [0141.153] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0141.153] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\181__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0141.154] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\181__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0141.154] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="182__C~1.PRO")) returned 1 [0141.154] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\182__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0141.155] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0141.155] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0141.155] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0141.155] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0141.223] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0141.225] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0141.226] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0141.248] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.261] CloseHandle (hObject=0x1fc) returned 1 [0141.261] CloseHandle (hObject=0x204) returned 1 [0141.262] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\182__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0141.263] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0141.263] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="182__C~1.PRO")) returned 0x7d2ad8 [0141.263] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="182__C~1.PRO")) returned 0 [0141.263] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0141.263] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\182__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0141.264] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\182__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0141.264] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="183__C~1.PRO")) returned 1 [0141.265] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\183__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0141.265] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0141.265] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x282 [0141.265] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0141.266] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0141.437] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x282, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x282, lpOverlapped=0x0) returned 1 [0141.443] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0141.444] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0141.467] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.478] CloseHandle (hObject=0x204) returned 1 [0141.478] CloseHandle (hObject=0x1fc) returned 1 [0141.479] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\183__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0141.480] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0141.480] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="183__C~1.PRO")) returned 0x7d3018 [0141.480] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="183__C~1.PRO")) returned 0 [0141.480] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0141.481] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\183__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0141.482] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\183__connections_cellular_pccw (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0141.482] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="184__C~1.PRO")) returned 1 [0141.482] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\184__connections_cellular_smartone-vodafone (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0141.482] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0141.483] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0141.483] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0141.483] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0141.659] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0141.662] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0141.663] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0141.686] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.698] CloseHandle (hObject=0x1fc) returned 1 [0141.698] CloseHandle (hObject=0x204) returned 1 [0141.699] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\184__connections_cellular_smartone-vodafone (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0141.700] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0141.700] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="184__C~1.PRO")) returned 0x7d3018 [0141.700] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="184__C~1.PRO")) returned 0 [0141.700] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0141.700] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\184__connections_cellular_smartone-vodafone (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0141.701] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\184__connections_cellular_smartone-vodafone (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0141.701] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="185__C~1.PRO")) returned 1 [0141.702] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\185__connections_cellular_telenor hungary (hungary)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0141.702] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0141.702] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0141.702] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0141.703] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0141.773] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0141.775] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0141.776] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0141.801] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.812] CloseHandle (hObject=0x204) returned 1 [0141.812] CloseHandle (hObject=0x1fc) returned 1 [0141.813] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\185__connections_cellular_telenor hungary (hungary)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0141.814] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0141.814] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="185__C~1.PRO")) returned 0x7d2d58 [0141.814] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="185__C~1.PRO")) returned 0 [0141.814] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0141.815] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\185__connections_cellular_telenor hungary (hungary)_i0$(__mvid)@wap.provxml")) returned 1 [0141.917] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\185__connections_cellular_telenor hungary (hungary)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0141.917] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="186__C~1.PRO")) returned 1 [0141.917] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\186__connections_cellular_magyar telekom (hungary)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0141.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0141.918] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0141.918] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0141.919] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0141.993] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0141.994] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0141.996] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.025] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.036] CloseHandle (hObject=0x1fc) returned 1 [0142.037] CloseHandle (hObject=0x204) returned 1 [0142.038] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\186__connections_cellular_magyar telekom (hungary)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0142.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0142.039] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="186__C~1.PRO")) returned 0x7d2b98 [0142.039] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="186__C~1.PRO")) returned 0 [0142.039] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0142.039] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\186__connections_cellular_magyar telekom (hungary)_i0$(__mvid)@wap.provxml")) returned 1 [0142.040] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\186__connections_cellular_magyar telekom (hungary)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0142.040] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="187__C~1.PRO")) returned 1 [0142.040] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\187__connections_cellular_vodafone hu (hungary)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.041] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.041] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0142.041] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.041] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0142.175] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0142.177] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0142.178] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.203] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.214] CloseHandle (hObject=0x204) returned 1 [0142.214] CloseHandle (hObject=0x1fc) returned 1 [0142.215] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\187__connections_cellular_vodafone hu (hungary)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0142.216] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0142.216] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="187__C~1.PRO")) returned 0x7d2998 [0142.216] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="187__C~1.PRO")) returned 0 [0142.216] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0142.216] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\187__connections_cellular_vodafone hu (hungary)_i0$(__mvid)@wap.provxml")) returned 1 [0142.218] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\187__connections_cellular_vodafone hu (hungary)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0142.218] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml", cAlternateFileName="188__C~1.PRO")) returned 1 [0142.218] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\188__connections_cellular_vodafone hu (hungary)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.219] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.219] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e3 [0142.219] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.219] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0142.301] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e3, lpOverlapped=0x0) returned 1 [0142.302] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0142.303] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.326] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.371] CloseHandle (hObject=0x1fc) returned 1 [0142.371] CloseHandle (hObject=0x204) returned 1 [0142.373] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\188__connections_cellular_vodafone hu (hungary)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0142.373] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0142.374] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml", cAlternateFileName="188__C~1.PRO")) returned 0x7d2998 [0142.374] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml", cAlternateFileName="188__C~1.PRO")) returned 0 [0142.374] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0142.374] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\188__connections_cellular_vodafone hu (hungary)_i1$(__mvid)@wap.provxml")) returned 1 [0142.375] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\188__connections_cellular_vodafone hu (hungary)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0142.375] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="189__C~1.PRO")) returned 1 [0142.375] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\189__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.376] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.376] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0142.376] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.377] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0142.449] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0142.451] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0142.452] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.475] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.486] CloseHandle (hObject=0x204) returned 1 [0142.486] CloseHandle (hObject=0x1fc) returned 1 [0142.570] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\189__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0142.570] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0142.570] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="189__C~1.PRO")) returned 0x7d3018 [0142.571] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="189__C~1.PRO")) returned 0 [0142.571] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0142.571] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\189__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0142.572] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\189__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0142.572] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="18__CE~1.PRO")) returned 1 [0142.572] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\18__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.572] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.573] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d0 [0142.573] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.573] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0142.669] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0142.670] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0142.671] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.697] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.708] CloseHandle (hObject=0x1fc) returned 1 [0142.709] CloseHandle (hObject=0x204) returned 1 [0142.710] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\18__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0 [0142.710] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0x20 [0142.710] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="18__CE~1.PRO")) returned 0x7d2d58 [0142.711] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="18__CE~1.PRO")) returned 0 [0142.711] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0142.711] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\18__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0142.712] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\18__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0142.712] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="190__C~1.PRO")) returned 1 [0142.712] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\190__connections_cellular_siminn hf (iceland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.712] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.713] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0142.713] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.713] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0142.783] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0142.812] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0142.813] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.836] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.850] CloseHandle (hObject=0x204) returned 1 [0142.850] CloseHandle (hObject=0x1fc) returned 1 [0142.851] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\190__connections_cellular_siminn hf (iceland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0142.852] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0142.852] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="190__C~1.PRO")) returned 0x7d2b58 [0142.852] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="190__C~1.PRO")) returned 0 [0142.852] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0142.852] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\190__connections_cellular_siminn hf (iceland)_i0$(__mvid)@wap.provxml")) returned 1 [0142.853] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\190__connections_cellular_siminn hf (iceland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0142.853] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="191__C~1.PRO")) returned 1 [0142.854] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\191__connections_cellular_vodafone iceland (iceland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.854] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.854] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0142.854] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.855] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0142.922] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0142.924] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0142.925] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0142.949] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.960] CloseHandle (hObject=0x1fc) returned 1 [0142.960] CloseHandle (hObject=0x204) returned 1 [0142.961] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\191__connections_cellular_vodafone iceland (iceland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0142.962] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0142.962] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="191__C~1.PRO")) returned 0x7d2b18 [0142.962] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="191__C~1.PRO")) returned 0 [0142.962] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0142.962] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\191__connections_cellular_vodafone iceland (iceland)_i0$(__mvid)@wap.provxml")) returned 1 [0142.963] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\191__connections_cellular_vodafone iceland (iceland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0142.963] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="192__C~1.PRO")) returned 1 [0142.965] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\192__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0142.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0142.966] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0142.966] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0142.967] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.104] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0143.105] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0143.106] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.130] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.141] CloseHandle (hObject=0x204) returned 1 [0143.141] CloseHandle (hObject=0x1fc) returned 1 [0143.142] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\192__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0143.143] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0143.143] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="192__C~1.PRO")) returned 0x7d3018 [0143.143] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="192__C~1.PRO")) returned 0 [0143.143] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0143.143] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\192__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0143.145] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\192__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0143.145] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="193__C~1.PRO")) returned 1 [0143.145] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\193__connections_cellular_aircel (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.146] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.146] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0143.146] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.146] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.213] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0143.215] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0143.216] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.243] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.254] CloseHandle (hObject=0x1fc) returned 1 [0143.254] CloseHandle (hObject=0x204) returned 1 [0143.255] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\193__connections_cellular_aircel (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0143.256] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0143.256] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="193__C~1.PRO")) returned 0x7d3018 [0143.256] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="193__C~1.PRO")) returned 0 [0143.256] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0143.256] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\193__connections_cellular_aircel (india)_i0$(__mvid)@wap.provxml")) returned 1 [0143.257] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\193__connections_cellular_aircel (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0143.258] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="194__C~1.PRO")) returned 1 [0143.258] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\194__connections_cellular_airtel (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.258] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.258] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0143.258] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.259] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.327] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0143.329] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0143.330] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.353] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.365] CloseHandle (hObject=0x204) returned 1 [0143.365] CloseHandle (hObject=0x1fc) returned 1 [0143.367] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\194__connections_cellular_airtel (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0143.367] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0143.367] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="194__C~1.PRO")) returned 0x7d2d58 [0143.367] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="194__C~1.PRO")) returned 0 [0143.367] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0143.368] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\194__connections_cellular_airtel (india)_i0$(__mvid)@wap.provxml")) returned 1 [0143.368] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\194__connections_cellular_airtel (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0143.369] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="195__C~1.PRO")) returned 1 [0143.369] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\195__connections_cellular_indosat (indonesia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.369] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.373] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0143.373] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.373] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.451] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0143.452] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0143.453] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.480] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.491] CloseHandle (hObject=0x1fc) returned 1 [0143.491] CloseHandle (hObject=0x204) returned 1 [0143.492] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\195__connections_cellular_indosat (indonesia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0143.493] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0143.493] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="195__C~1.PRO")) returned 0x7d3018 [0143.493] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="195__C~1.PRO")) returned 0 [0143.493] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0143.493] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\195__connections_cellular_indosat (indonesia)_i0$(__mvid)@wap.provxml")) returned 1 [0143.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\195__connections_cellular_indosat (indonesia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0143.494] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="196__C~1.PRO")) returned 1 [0143.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\196__connections_cellular_indosat (indonesia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.495] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0143.495] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.496] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.641] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0143.643] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0143.644] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.668] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.679] CloseHandle (hObject=0x204) returned 1 [0143.679] CloseHandle (hObject=0x1fc) returned 1 [0143.680] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\196__connections_cellular_indosat (indonesia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0143.681] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0143.681] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="196__C~1.PRO")) returned 0x7d2c18 [0143.681] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="196__C~1.PRO")) returned 0 [0143.681] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0143.681] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\196__connections_cellular_indosat (indonesia)_i1$(__mvid)@wap.provxml")) returned 1 [0143.683] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\196__connections_cellular_indosat (indonesia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0143.683] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="197__C~1.PRO")) returned 1 [0143.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\197__connections_cellular_telkomsel (indonesia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.683] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0143.684] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.684] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.750] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0143.752] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0143.753] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.777] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.788] CloseHandle (hObject=0x1fc) returned 1 [0143.788] CloseHandle (hObject=0x204) returned 1 [0143.790] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\197__connections_cellular_telkomsel (indonesia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0143.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0143.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="197__C~1.PRO")) returned 0x7d3018 [0143.791] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="197__C~1.PRO")) returned 0 [0143.791] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0143.791] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\197__connections_cellular_telkomsel (indonesia)_i0$(__mvid)@wap.provxml")) returned 1 [0143.792] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\197__connections_cellular_telkomsel (indonesia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0143.792] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="198__C~1.PRO")) returned 1 [0143.792] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\198__connections_cellular_telkomsel (indonesia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.793] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.793] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0143.793] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.793] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0143.858] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0143.864] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0143.865] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0143.887] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.898] CloseHandle (hObject=0x204) returned 1 [0143.898] CloseHandle (hObject=0x1fc) returned 1 [0143.900] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\198__connections_cellular_telkomsel (indonesia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0143.900] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0143.900] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="198__C~1.PRO")) returned 0x7d29d8 [0143.901] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="198__C~1.PRO")) returned 0 [0143.901] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0143.901] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\198__connections_cellular_telkomsel (indonesia)_i1$(__mvid)@wap.provxml")) returned 1 [0143.902] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\198__connections_cellular_telkomsel (indonesia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0143.902] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="199__C~1.PRO")) returned 1 [0143.902] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\199__connections_cellular_vodafone (indonesia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0143.902] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0143.903] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0143.903] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0143.903] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.014] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0144.015] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0144.016] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.043] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.053] CloseHandle (hObject=0x1fc) returned 1 [0144.054] CloseHandle (hObject=0x204) returned 1 [0144.055] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\199__connections_cellular_vodafone (indonesia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0144.055] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0144.055] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="199__C~1.PRO")) returned 0x7d3098 [0144.055] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="199__C~1.PRO")) returned 0 [0144.056] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0144.056] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\199__connections_cellular_vodafone (indonesia)_i0$(__mvid)@wap.provxml")) returned 1 [0144.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\199__connections_cellular_vodafone (indonesia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0144.057] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="19__CE~1.PRO")) returned 1 [0144.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\19__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.058] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e2 [0144.058] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.058] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.122] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e2, lpOverlapped=0x0) returned 1 [0144.125] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0144.126] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.148] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.160] CloseHandle (hObject=0x204) returned 1 [0144.160] CloseHandle (hObject=0x1fc) returned 1 [0144.161] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\19__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0144.161] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0144.161] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="19__CE~1.PRO")) returned 0x7d3018 [0144.161] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="19__CE~1.PRO")) returned 0 [0144.161] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0144.162] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\19__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0144.163] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\19__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0144.163] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="1__CON~1.PRO")) returned 1 [0144.163] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\1__connections_cellular_vodafone albania (albania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.163] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.163] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0144.163] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.164] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.270] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0144.272] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0144.273] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.295] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.306] CloseHandle (hObject=0x1fc) returned 1 [0144.307] CloseHandle (hObject=0x204) returned 1 [0144.308] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\1__connections_cellular_vodafone albania (albania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0144.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0144.308] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="1__CON~1.PRO")) returned 0x7d2c98 [0144.308] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="1__CON~1.PRO")) returned 0 [0144.308] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0144.309] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\1__connections_cellular_vodafone albania (albania)_i0$(__mvid)@wap.provxml")) returned 1 [0144.312] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\1__connections_cellular_vodafone albania (albania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0144.312] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="200__C~1.PRO")) returned 1 [0144.312] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\200__connections_cellular_asiacell (iraq)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.312] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.313] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e1 [0144.313] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.314] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.381] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e1, lpOverlapped=0x0) returned 1 [0144.382] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0144.383] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.405] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.416] CloseHandle (hObject=0x204) returned 1 [0144.417] CloseHandle (hObject=0x1fc) returned 1 [0144.418] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\200__connections_cellular_asiacell (iraq)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0144.419] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0144.419] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="200__C~1.PRO")) returned 0x7d2a58 [0144.419] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="200__C~1.PRO")) returned 0 [0144.419] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0144.419] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\200__connections_cellular_asiacell (iraq)_i0$(__mvid)@wap.provxml")) returned 1 [0144.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\200__connections_cellular_asiacell (iraq)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0144.420] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x308, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="201__C~1.PRO")) returned 1 [0144.420] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\201__connections_cellular_korektelecom (iraq)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.421] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x308 [0144.421] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.421] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.491] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x308, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x308, lpOverlapped=0x0) returned 1 [0144.493] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0144.494] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.520] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.531] CloseHandle (hObject=0x1fc) returned 1 [0144.531] CloseHandle (hObject=0x204) returned 1 [0144.533] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\201__connections_cellular_korektelecom (iraq)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0144.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0144.534] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x308, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="201__C~1.PRO")) returned 0x7d3018 [0144.534] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x308, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="201__C~1.PRO")) returned 0 [0144.534] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0144.534] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\201__connections_cellular_korektelecom (iraq)_i0$(__mvid)@wap.provxml")) returned 1 [0144.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\201__connections_cellular_korektelecom (iraq)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0144.535] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="202__C~1.PRO")) returned 1 [0144.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\202__connections_cellular_zain (iraq)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.536] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1dd [0144.536] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.537] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.682] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1dd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1dd, lpOverlapped=0x0) returned 1 [0144.683] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0144.684] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.707] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.717] CloseHandle (hObject=0x204) returned 1 [0144.718] CloseHandle (hObject=0x1fc) returned 1 [0144.719] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\202__connections_cellular_zain (iraq)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0144.720] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0144.720] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="202__C~1.PRO")) returned 0x7d2b18 [0144.720] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="202__C~1.PRO")) returned 0 [0144.720] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0144.720] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\202__connections_cellular_zain (iraq)_i0$(__mvid)@wap.provxml")) returned 1 [0144.721] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\202__connections_cellular_zain (iraq)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0144.721] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="203__C~1.PRO")) returned 1 [0144.721] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\203__connections_cellular_3 (ireland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.723] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.723] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0144.723] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.723] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.788] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0144.789] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0144.790] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.817] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.827] CloseHandle (hObject=0x1fc) returned 1 [0144.828] CloseHandle (hObject=0x204) returned 1 [0144.829] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\203__connections_cellular_3 (ireland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0144.830] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0144.830] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="203__C~1.PRO")) returned 0x7d2c18 [0144.830] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="203__C~1.PRO")) returned 0 [0144.830] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0144.830] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\203__connections_cellular_3 (ireland)_i0$(__mvid)@wap.provxml")) returned 1 [0144.831] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\203__connections_cellular_3 (ireland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0144.831] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="204__C~1.PRO")) returned 1 [0144.831] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\204__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.832] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.832] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc [0144.832] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.832] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0144.952] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cc, lpOverlapped=0x0) returned 1 [0144.954] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0144.957] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0144.981] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.991] CloseHandle (hObject=0x204) returned 1 [0144.992] CloseHandle (hObject=0x1fc) returned 1 [0144.993] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\204__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0144.994] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0144.994] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="204__C~1.PRO")) returned 0x7d2c18 [0144.994] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="204__C~1.PRO")) returned 0 [0144.994] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0144.994] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\204__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0144.995] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\204__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0144.995] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="205__C~1.PRO")) returned 1 [0144.995] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\205__connections_cellular_o2 (ireland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0144.996] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0144.996] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x283 [0144.996] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0144.996] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.087] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x283, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x283, lpOverlapped=0x0) returned 1 [0145.088] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0145.089] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0145.111] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.122] CloseHandle (hObject=0x1fc) returned 1 [0145.122] CloseHandle (hObject=0x204) returned 1 [0145.124] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\205__connections_cellular_o2 (ireland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0145.124] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0145.124] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="205__C~1.PRO")) returned 0x7d3018 [0145.124] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="205__C~1.PRO")) returned 0 [0145.125] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0145.125] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\205__connections_cellular_o2 (ireland)_i0$(__mvid)@wap.provxml")) returned 1 [0145.126] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\205__connections_cellular_o2 (ireland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0145.126] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="206__C~1.PRO")) returned 1 [0145.126] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\206__connections_cellular_vodafone ireland (ireland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0145.129] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0145.130] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35f [0145.130] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0145.130] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.195] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35f, lpOverlapped=0x0) returned 1 [0145.196] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0145.197] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0145.220] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.231] CloseHandle (hObject=0x204) returned 1 [0145.231] CloseHandle (hObject=0x1fc) returned 1 [0145.232] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\206__connections_cellular_vodafone ireland (ireland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0145.233] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0145.233] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="206__C~1.PRO")) returned 0x7d2d58 [0145.233] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="206__C~1.PRO")) returned 0 [0145.233] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0145.233] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\206__connections_cellular_vodafone ireland (ireland)_i0$(__mvid)@wap.provxml")) returned 1 [0145.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\206__connections_cellular_vodafone ireland (ireland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0145.235] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="207__C~1.PRO")) returned 1 [0145.235] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\207__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0145.235] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0145.235] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0145.235] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0145.236] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.356] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0145.357] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0145.358] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0145.381] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.392] CloseHandle (hObject=0x1fc) returned 1 [0145.392] CloseHandle (hObject=0x204) returned 1 [0145.490] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\207__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0145.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0145.491] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="207__C~1.PRO")) returned 0x7d2918 [0145.491] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="207__C~1.PRO")) returned 0 [0145.491] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0145.491] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\207__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0145.492] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\207__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0145.492] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="208__C~1.PRO")) returned 1 [0145.494] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\208__connections_cellular_cellcom (israel)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0145.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0145.495] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0145.495] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0145.496] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.572] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0145.574] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0145.575] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0145.663] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.674] CloseHandle (hObject=0x204) returned 1 [0145.674] CloseHandle (hObject=0x1fc) returned 1 [0145.675] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\208__connections_cellular_cellcom (israel)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0145.676] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0145.676] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="208__C~1.PRO")) returned 0x7d3018 [0145.676] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="208__C~1.PRO")) returned 0 [0145.676] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0145.676] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\208__connections_cellular_cellcom (israel)_i0$(__mvid)@wap.provxml")) returned 1 [0145.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\208__connections_cellular_cellcom (israel)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0145.677] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="209__C~1.PRO")) returned 1 [0145.677] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\209__connections_cellular_orange (israel)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0145.678] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0145.678] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0145.678] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0145.679] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.739] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0145.741] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0145.742] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0145.764] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.775] CloseHandle (hObject=0x1fc) returned 1 [0145.775] CloseHandle (hObject=0x204) returned 1 [0145.776] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\209__connections_cellular_orange (israel)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0145.777] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0145.777] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="209__C~1.PRO")) returned 0x7d2c18 [0145.777] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="209__C~1.PRO")) returned 0 [0145.777] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0145.777] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\209__connections_cellular_orange (israel)_i0$(__mvid)@wap.provxml")) returned 1 [0145.778] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\209__connections_cellular_orange (israel)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0145.778] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="20__CO~1.PRO")) returned 1 [0145.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\20__connections_cellular_telstra (australia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0145.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0145.785] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e5 [0145.785] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0145.785] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.869] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e5, lpOverlapped=0x0) returned 1 [0145.870] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0145.871] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0145.896] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.906] CloseHandle (hObject=0x204) returned 1 [0145.907] CloseHandle (hObject=0x1fc) returned 1 [0145.908] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\20__connections_cellular_telstra (australia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0145.909] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0145.909] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="20__CO~1.PRO")) returned 0x7d2cd8 [0145.909] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="20__CO~1.PRO")) returned 0 [0145.909] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0145.910] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\20__connections_cellular_telstra (australia)_i0$(__mvid)@wap.provxml")) returned 1 [0145.911] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\20__connections_cellular_telstra (australia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0145.911] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="210__C~1.PRO")) returned 1 [0145.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\210__connections_cellular_pelephone (israel)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0145.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0145.912] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x354 [0145.912] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0145.912] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0145.977] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x354, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x354, lpOverlapped=0x0) returned 1 [0145.982] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0145.983] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.005] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.016] CloseHandle (hObject=0x1fc) returned 1 [0146.016] CloseHandle (hObject=0x204) returned 1 [0146.018] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\210__connections_cellular_pelephone (israel)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0146.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0146.018] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="210__C~1.PRO")) returned 0x7d2a58 [0146.020] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="210__C~1.PRO")) returned 0 [0146.020] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0146.020] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\210__connections_cellular_pelephone (israel)_i0$(__mvid)@wap.provxml")) returned 1 [0146.021] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\210__connections_cellular_pelephone (israel)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0146.021] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="211__C~1.PRO")) returned 1 [0146.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\211__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.022] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.022] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ce [0146.022] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.022] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0146.096] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1ce, lpOverlapped=0x0) returned 1 [0146.097] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0146.098] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.121] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.132] CloseHandle (hObject=0x204) returned 1 [0146.133] CloseHandle (hObject=0x1fc) returned 1 [0146.134] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\211__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0146.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0146.135] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="211__C~1.PRO")) returned 0x7d2998 [0146.135] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="211__C~1.PRO")) returned 0 [0146.135] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0146.135] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\211__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0146.136] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\211__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0146.136] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="212__C~1.PRO")) returned 1 [0146.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\212__connections_cellular_tim (italy)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.137] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0146.137] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.138] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0146.236] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0146.242] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0146.243] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.265] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.276] CloseHandle (hObject=0x1fc) returned 1 [0146.276] CloseHandle (hObject=0x204) returned 1 [0146.277] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\212__connections_cellular_tim (italy)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0146.278] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0146.278] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="212__C~1.PRO")) returned 0x7d2b58 [0146.278] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="212__C~1.PRO")) returned 0 [0146.278] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0146.279] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\212__connections_cellular_tim (italy)_i0$(__mvid)@wap.provxml")) returned 1 [0146.280] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\212__connections_cellular_tim (italy)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0146.280] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="213__C~1.PRO")) returned 1 [0146.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\213__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.281] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc [0146.281] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.281] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0146.394] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cc, lpOverlapped=0x0) returned 1 [0146.395] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0146.396] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.421] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.442] CloseHandle (hObject=0x204) returned 1 [0146.443] CloseHandle (hObject=0x1fc) returned 1 [0146.444] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\213__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0146.445] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0146.445] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="213__C~1.PRO")) returned 0x7d3018 [0146.446] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="213__C~1.PRO")) returned 0 [0146.446] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0146.446] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\213__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0146.447] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\213__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0146.447] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="214__C~1.PRO")) returned 1 [0146.448] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\214__connections_cellular_vodafone it (italy)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.448] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.448] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0146.448] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.449] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0146.521] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0146.526] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0146.527] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.550] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.744] CloseHandle (hObject=0x1fc) returned 1 [0146.745] CloseHandle (hObject=0x204) returned 1 [0146.746] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\214__connections_cellular_vodafone it (italy)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0146.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0146.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="214__C~1.PRO")) returned 0x7d2a98 [0146.747] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="214__C~1.PRO")) returned 0 [0146.747] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0146.747] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\214__connections_cellular_vodafone it (italy)_i0$(__mvid)@wap.provxml")) returned 1 [0146.748] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\214__connections_cellular_vodafone it (italy)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0146.748] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="215__C~1.PRO")) returned 1 [0146.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\215__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.749] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0146.749] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.749] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0146.818] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0146.821] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0146.822] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.845] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.855] CloseHandle (hObject=0x204) returned 1 [0146.856] CloseHandle (hObject=0x1fc) returned 1 [0146.857] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\215__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0146.858] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0146.858] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="215__C~1.PRO")) returned 0x7d3018 [0146.858] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="215__C~1.PRO")) returned 0 [0146.858] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0146.858] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\215__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0146.859] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\215__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0146.859] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="216__C~1.PRO")) returned 1 [0146.859] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\216__connections_cellular_wind (italy)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.860] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.860] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x283 [0146.860] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.860] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0146.932] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x283, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x283, lpOverlapped=0x0) returned 1 [0146.934] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0146.935] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0146.958] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.970] CloseHandle (hObject=0x1fc) returned 1 [0146.970] CloseHandle (hObject=0x204) returned 1 [0146.971] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\216__connections_cellular_wind (italy)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0146.972] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0146.972] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="216__C~1.PRO")) returned 0x7d3018 [0146.972] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="216__C~1.PRO")) returned 0 [0146.972] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0146.972] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\216__connections_cellular_wind (italy)_i0$(__mvid)@wap.provxml")) returned 1 [0146.973] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\216__connections_cellular_wind (italy)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0146.973] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="217__C~1.PRO")) returned 1 [0146.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\217__connections_cellular_wind (italy)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0146.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0146.974] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x287 [0146.974] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0146.975] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.040] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x287, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x287, lpOverlapped=0x0) returned 1 [0147.041] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0147.042] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.065] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.076] CloseHandle (hObject=0x204) returned 1 [0147.076] CloseHandle (hObject=0x1fc) returned 1 [0147.077] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\217__connections_cellular_wind (italy)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0147.078] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0147.078] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="217__C~1.PRO")) returned 0x7d3018 [0147.078] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="217__C~1.PRO")) returned 0 [0147.078] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0147.078] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\217__connections_cellular_wind (italy)_i1$(__mvid)@wap.provxml")) returned 1 [0147.079] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\217__connections_cellular_wind (italy)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0147.079] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="218__C~1.PRO")) returned 1 [0147.079] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\218__connections_cellular_claro (jamaica)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.080] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.080] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x313 [0147.080] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.080] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.176] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x313, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x313, lpOverlapped=0x0) returned 1 [0147.178] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0147.180] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.202] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.213] CloseHandle (hObject=0x1fc) returned 1 [0147.213] CloseHandle (hObject=0x204) returned 1 [0147.215] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\218__connections_cellular_claro (jamaica)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0147.215] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0147.215] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="218__C~1.PRO")) returned 0x7d3018 [0147.215] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="218__C~1.PRO")) returned 0 [0147.215] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0147.216] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\218__connections_cellular_claro (jamaica)_i0$(__mvid)@wap.provxml")) returned 1 [0147.216] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\218__connections_cellular_claro (jamaica)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0147.217] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml", cAlternateFileName="219__C~1.PRO")) returned 1 [0147.217] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\219__connections_cellular_claro (jamaica)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.217] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.217] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fb [0147.217] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.218] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.282] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2fb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2fb, lpOverlapped=0x0) returned 1 [0147.284] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0147.285] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.308] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.319] CloseHandle (hObject=0x204) returned 1 [0147.319] CloseHandle (hObject=0x1fc) returned 1 [0147.321] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\219__connections_cellular_claro (jamaica)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0147.322] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0147.322] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml", cAlternateFileName="219__C~1.PRO")) returned 0x7d2ad8 [0147.322] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml", cAlternateFileName="219__C~1.PRO")) returned 0 [0147.322] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0147.322] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\219__connections_cellular_claro (jamaica)_i1$(__mvid)@wap.provxml")) returned 1 [0147.323] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\219__connections_cellular_claro (jamaica)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0147.324] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="21__CO~1.PRO")) returned 1 [0147.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\21__connections_cellular_telstra (australia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.324] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e4 [0147.324] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.325] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.391] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e4, lpOverlapped=0x0) returned 1 [0147.393] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0147.394] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.417] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.428] CloseHandle (hObject=0x1fc) returned 1 [0147.428] CloseHandle (hObject=0x204) returned 1 [0147.429] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\21__connections_cellular_telstra (australia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0147.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0147.430] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="21__CO~1.PRO")) returned 0x7d2a58 [0147.430] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="21__CO~1.PRO")) returned 0 [0147.430] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0147.430] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\21__connections_cellular_telstra (australia)_i1$(__mvid)@wap.provxml")) returned 1 [0147.433] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\21__connections_cellular_telstra (australia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0147.433] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="220__C~1.PRO")) returned 1 [0147.433] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\220__connections_cellular_cable and wireless (jamaica)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.434] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.434] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ee [0147.434] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.435] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.578] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1ee, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1ee, lpOverlapped=0x0) returned 1 [0147.579] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0147.580] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.679] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.694] CloseHandle (hObject=0x204) returned 1 [0147.694] CloseHandle (hObject=0x1fc) returned 1 [0147.697] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\220__connections_cellular_cable and wireless (jamaica)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0147.697] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0147.698] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="220__C~1.PRO")) returned 0x7d2b98 [0147.698] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="220__C~1.PRO")) returned 0 [0147.698] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0147.698] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\220__connections_cellular_cable and wireless (jamaica)_i0$(__mvid)@wap.provxml")) returned 1 [0147.699] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\220__connections_cellular_cable and wireless (jamaica)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0147.699] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x312, dwReserved0=0x0, dwReserved1=0x0, cFileName="221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="221__C~1.PRO")) returned 1 [0147.699] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\221__connections_cellular_digicel (jamaica)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.700] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.700] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x312 [0147.700] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.700] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.761] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x312, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x312, lpOverlapped=0x0) returned 1 [0147.763] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0147.764] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.790] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.800] CloseHandle (hObject=0x1fc) returned 1 [0147.801] CloseHandle (hObject=0x204) returned 1 [0147.802] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\221__connections_cellular_digicel (jamaica)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0147.803] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0147.803] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x312, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="221__C~1.PRO")) returned 0x7d3018 [0147.803] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x312, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="221__C~1.PRO")) returned 0 [0147.803] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0147.803] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\221__connections_cellular_digicel (jamaica)_i0$(__mvid)@wap.provxml")) returned 1 [0147.804] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\221__connections_cellular_digicel (jamaica)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0147.804] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="222__C~1.PRO")) returned 1 [0147.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\222__connections_cellular_docomo (japan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.805] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.805] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0147.805] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.806] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.881] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0147.883] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0147.884] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0147.906] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.917] CloseHandle (hObject=0x204) returned 1 [0147.918] CloseHandle (hObject=0x1fc) returned 1 [0147.919] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\222__connections_cellular_docomo (japan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0147.920] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0147.920] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="222__C~1.PRO")) returned 0x7d2cd8 [0147.920] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="222__C~1.PRO")) returned 0 [0147.920] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0147.920] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\222__connections_cellular_docomo (japan)_i0$(__mvid)@wap.provxml")) returned 1 [0147.921] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\222__connections_cellular_docomo (japan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0147.921] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="223__C~1.PRO")) returned 1 [0147.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\223__connections_cellular_docomo (japan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0147.923] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0147.923] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2de [0147.924] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0147.924] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0147.988] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2de, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2de, lpOverlapped=0x0) returned 1 [0147.990] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0147.991] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0148.014] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0148.025] CloseHandle (hObject=0x1fc) returned 1 [0148.025] CloseHandle (hObject=0x204) returned 1 [0148.026] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\223__connections_cellular_docomo (japan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0148.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0148.027] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="223__C~1.PRO")) returned 0x7d2998 [0148.027] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="223__C~1.PRO")) returned 0 [0148.027] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0148.027] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\223__connections_cellular_docomo (japan)_i1$(__mvid)@wap.provxml")) returned 1 [0148.028] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\223__connections_cellular_docomo (japan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0148.028] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="224__C~1.PRO")) returned 1 [0148.054] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\224__connections_cellular_docomo (japan)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0148.054] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0148.055] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0148.055] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0148.055] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0148.154] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0148.157] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0148.158] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0148.180] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0148.191] CloseHandle (hObject=0x204) returned 1 [0148.192] CloseHandle (hObject=0x1fc) returned 1 [0148.193] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\224__connections_cellular_docomo (japan)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0148.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0148.193] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="224__C~1.PRO")) returned 0x7d3098 [0148.194] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="224__C~1.PRO")) returned 0 [0148.194] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0148.194] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\224__connections_cellular_docomo (japan)_i2$(__mvid)@wap.provxml")) returned 1 [0148.195] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\224__connections_cellular_docomo (japan)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0148.195] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml", cAlternateFileName="225__C~1.PRO")) returned 1 [0148.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\225__connections_cellular_docomo (japan)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0148.195] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0148.196] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0148.196] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0148.196] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0148.261] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0148.263] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0148.264] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0148.287] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0148.298] CloseHandle (hObject=0x1fc) returned 1 [0148.298] CloseHandle (hObject=0x204) returned 1 [0148.300] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\225__connections_cellular_docomo (japan)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0148.300] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0148.300] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml", cAlternateFileName="225__C~1.PRO")) returned 0x7d3018 [0148.300] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml", cAlternateFileName="225__C~1.PRO")) returned 0 [0148.300] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0148.301] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\225__connections_cellular_docomo (japan)_i3$(__mvid)@wap.provxml")) returned 1 [0148.302] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\225__connections_cellular_docomo (japan)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0148.302] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="226__C~1.PRO")) returned 1 [0148.302] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\226__connections_cellular_orange (jordan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0148.302] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0148.303] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x343 [0148.303] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0148.304] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0148.369] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x343, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x343, lpOverlapped=0x0) returned 1 [0148.371] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0148.372] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0148.395] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0148.405] CloseHandle (hObject=0x204) returned 1 [0148.406] CloseHandle (hObject=0x1fc) returned 1 [0148.408] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\226__connections_cellular_orange (jordan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0148.409] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0148.409] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="226__C~1.PRO")) returned 0x7d3018 [0148.409] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="226__C~1.PRO")) returned 0 [0148.409] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0148.409] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\226__connections_cellular_orange (jordan)_i0$(__mvid)@wap.provxml")) returned 1 [0148.411] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\226__connections_cellular_orange (jordan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0148.411] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="227__C~1.PRO")) returned 1 [0148.411] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\227__connections_cellular_umniah (jordan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0148.411] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0148.411] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27c [0148.411] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0148.412] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0148.490] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27c, lpOverlapped=0x0) returned 1 [0148.494] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0148.495] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0148.517] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0148.528] CloseHandle (hObject=0x1fc) returned 1 [0148.528] CloseHandle (hObject=0x204) returned 1 [0148.530] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\227__connections_cellular_umniah (jordan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0148.530] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0148.531] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="227__C~1.PRO")) returned 0x7d2998 [0148.531] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="227__C~1.PRO")) returned 0 [0148.535] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0148.556] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\227__connections_cellular_umniah (jordan)_i0$(__mvid)@wap.provxml")) returned 1 [0148.557] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\227__connections_cellular_umniah (jordan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0148.557] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="228__C~1.PRO")) returned 1 [0148.557] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\228__connections_cellular_zain (jordan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0148.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0148.568] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0148.568] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0148.568] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0148.766] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0148.769] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0148.770] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0148.823] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0148.834] CloseHandle (hObject=0x204) returned 1 [0148.835] CloseHandle (hObject=0x1fc) returned 1 [0148.840] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\228__connections_cellular_zain (jordan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0148.840] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0148.841] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="228__C~1.PRO")) returned 0x7d2d58 [0148.841] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="228__C~1.PRO")) returned 0 [0148.841] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0148.841] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\228__connections_cellular_zain (jordan)_i0$(__mvid)@wap.provxml")) returned 1 [0148.842] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\228__connections_cellular_zain (jordan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0148.842] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="229__C~1.PRO")) returned 1 [0148.842] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\229__connections_cellular_zain (jordan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0148.842] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0148.843] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x300 [0148.843] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0148.844] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0148.976] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x300, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0148.977] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0148.978] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0149.022] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0149.032] CloseHandle (hObject=0x1fc) returned 1 [0149.033] CloseHandle (hObject=0x204) returned 1 [0149.034] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\229__connections_cellular_zain (jordan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0149.035] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0149.035] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="229__C~1.PRO")) returned 0x7d3018 [0149.035] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="229__C~1.PRO")) returned 0 [0149.035] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0149.035] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\229__connections_cellular_zain (jordan)_i1$(__mvid)@wap.provxml")) returned 1 [0149.036] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\229__connections_cellular_zain (jordan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0149.036] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="22__CO~1.PRO")) returned 1 [0149.036] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\22__connections_cellular_telstra (australia)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0149.037] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0149.037] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x376 [0149.037] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0149.038] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0149.268] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x376, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x376, lpOverlapped=0x0) returned 1 [0149.270] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0149.271] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0149.293] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0149.304] CloseHandle (hObject=0x204) returned 1 [0149.304] CloseHandle (hObject=0x1fc) returned 1 [0149.305] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\22__connections_cellular_telstra (australia)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0149.306] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0149.306] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="22__CO~1.PRO")) returned 0x7d2b18 [0149.306] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="22__CO~1.PRO")) returned 0 [0149.306] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0149.307] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\22__connections_cellular_telstra (australia)_i2$(__mvid)@wap.provxml")) returned 1 [0149.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\22__connections_cellular_telstra (australia)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0149.308] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="230__C~1.PRO")) returned 1 [0149.308] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\230__connections_cellular_safaricom (kenya)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0149.308] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0149.308] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x341 [0149.308] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0149.309] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0149.381] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x341, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x341, lpOverlapped=0x0) returned 1 [0149.383] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0149.384] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0149.412] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0149.424] CloseHandle (hObject=0x1fc) returned 1 [0149.424] CloseHandle (hObject=0x204) returned 1 [0149.425] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\230__connections_cellular_safaricom (kenya)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0149.426] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0149.426] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="230__C~1.PRO")) returned 0x7d2b98 [0149.426] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="230__C~1.PRO")) returned 0 [0149.426] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0149.426] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\230__connections_cellular_safaricom (kenya)_i0$(__mvid)@wap.provxml")) returned 1 [0149.427] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\230__connections_cellular_safaricom (kenya)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0149.427] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="231__C~1.PRO")) returned 1 [0149.428] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\231__connections_cellular_ktf hsdpa internet (korea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0149.428] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0149.428] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29e [0149.428] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0149.429] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0149.531] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29e, lpOverlapped=0x0) returned 1 [0149.533] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0149.534] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0149.558] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0149.666] CloseHandle (hObject=0x204) returned 1 [0149.666] CloseHandle (hObject=0x1fc) returned 1 [0149.667] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\231__connections_cellular_ktf hsdpa internet (korea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0149.668] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0149.668] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="231__C~1.PRO")) returned 0x7d29d8 [0149.668] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="231__C~1.PRO")) returned 0 [0149.669] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0149.669] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\231__connections_cellular_ktf hsdpa internet (korea)_i0$(__mvid)@wap.provxml")) returned 1 [0149.670] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\231__connections_cellular_ktf hsdpa internet (korea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0149.670] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="232__C~1.PRO")) returned 1 [0149.670] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\232__connections_cellular_wataniya (kuwait)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0149.671] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0149.671] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0149.671] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0149.672] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0149.738] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28e, lpOverlapped=0x0) returned 1 [0149.743] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0149.744] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0149.777] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0149.788] CloseHandle (hObject=0x1fc) returned 1 [0149.788] CloseHandle (hObject=0x204) returned 1 [0149.790] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\232__connections_cellular_wataniya (kuwait)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0149.791] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0149.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="232__C~1.PRO")) returned 0x7d2c18 [0149.792] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="232__C~1.PRO")) returned 0 [0149.792] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0149.792] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\232__connections_cellular_wataniya (kuwait)_i0$(__mvid)@wap.provxml")) returned 1 [0149.793] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\232__connections_cellular_wataniya (kuwait)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0149.793] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="233__C~1.PRO")) returned 1 [0149.793] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\233__connections_cellular_zain (kuwait)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0149.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0149.794] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc [0149.794] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0149.794] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0149.864] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bc, lpOverlapped=0x0) returned 1 [0149.868] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0149.869] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0149.924] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0149.935] CloseHandle (hObject=0x204) returned 1 [0149.935] CloseHandle (hObject=0x1fc) returned 1 [0149.937] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\233__connections_cellular_zain (kuwait)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0149.938] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0149.938] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="233__C~1.PRO")) returned 0x7d2918 [0149.938] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="233__C~1.PRO")) returned 0 [0149.938] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0149.939] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\233__connections_cellular_zain (kuwait)_i0$(__mvid)@wap.provxml")) returned 1 [0149.940] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\233__connections_cellular_zain (kuwait)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0149.940] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="234__C~1.PRO")) returned 1 [0149.940] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\234__connections_cellular_bite latvija (latvia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0149.940] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0149.941] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0149.941] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0149.941] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0150.013] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0150.015] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0150.016] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0150.039] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0150.056] CloseHandle (hObject=0x1fc) returned 1 [0150.056] CloseHandle (hObject=0x204) returned 1 [0150.058] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\234__connections_cellular_bite latvija (latvia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0150.059] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0150.059] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="234__C~1.PRO")) returned 0x7d2a58 [0150.059] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="234__C~1.PRO")) returned 0 [0150.059] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0150.059] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\234__connections_cellular_bite latvija (latvia)_i0$(__mvid)@wap.provxml")) returned 1 [0150.060] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\234__connections_cellular_bite latvija (latvia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0150.060] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="235__C~1.PRO")) returned 1 [0150.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\235__connections_cellular_lmt (latvia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0150.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0150.061] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x383 [0150.061] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0150.062] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0150.176] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x383, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x383, lpOverlapped=0x0) returned 1 [0150.178] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0150.179] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0150.201] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0150.216] CloseHandle (hObject=0x204) returned 1 [0150.216] CloseHandle (hObject=0x1fc) returned 1 [0150.217] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\235__connections_cellular_lmt (latvia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0150.218] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0150.218] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="235__C~1.PRO")) returned 0x7d3018 [0150.218] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="235__C~1.PRO")) returned 0 [0150.218] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0150.219] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\235__connections_cellular_lmt (latvia)_i0$(__mvid)@wap.provxml")) returned 1 [0150.220] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\235__connections_cellular_lmt (latvia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0150.220] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="236__C~1.PRO")) returned 1 [0150.220] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\236__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0150.220] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0150.221] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0150.221] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0150.221] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0150.381] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0150.383] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0150.385] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0150.407] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0150.418] CloseHandle (hObject=0x1fc) returned 1 [0150.419] CloseHandle (hObject=0x204) returned 1 [0150.420] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\236__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0150.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0150.421] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="236__C~1.PRO")) returned 0x7d2b18 [0150.421] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="236__C~1.PRO")) returned 0 [0150.421] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0150.421] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\236__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml")) returned 1 [0150.423] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\236__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0150.423] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="237__C~1.PRO")) returned 1 [0150.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\237__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0150.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0150.424] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x309 [0150.424] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0150.424] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0150.519] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x309, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x309, lpOverlapped=0x0) returned 1 [0150.521] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0150.522] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0150.544] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0150.556] CloseHandle (hObject=0x204) returned 1 [0150.556] CloseHandle (hObject=0x1fc) returned 1 [0150.558] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\237__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0150.559] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0150.559] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="237__C~1.PRO")) returned 0x7d2b98 [0150.559] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="237__C~1.PRO")) returned 0 [0150.559] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0150.559] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\237__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml")) returned 1 [0150.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\237__connections_cellular_tele2 (latvia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0150.560] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="238__C~1.PRO")) returned 1 [0150.560] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\238__connections_cellular_alfa (lebanon)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0150.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0150.561] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0150.561] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0150.561] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0150.683] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0150.685] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0150.686] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0150.710] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0150.721] CloseHandle (hObject=0x1fc) returned 1 [0150.721] CloseHandle (hObject=0x204) returned 1 [0150.723] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\238__connections_cellular_alfa (lebanon)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0150.723] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0150.723] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="238__C~1.PRO")) returned 0x7d3018 [0150.724] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="238__C~1.PRO")) returned 0 [0150.724] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0150.724] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\238__connections_cellular_alfa (lebanon)_i0$(__mvid)@wap.provxml")) returned 1 [0150.725] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\238__connections_cellular_alfa (lebanon)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0150.725] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="239__C~1.PRO")) returned 1 [0150.725] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\239__connections_cellular_mtc touch (lebanon)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0150.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0150.731] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x30e [0150.731] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0150.732] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0150.832] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x30e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x30e, lpOverlapped=0x0) returned 1 [0150.985] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0150.986] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.010] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.021] CloseHandle (hObject=0x204) returned 1 [0151.021] CloseHandle (hObject=0x1fc) returned 1 [0151.022] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\239__connections_cellular_mtc touch (lebanon)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0151.023] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0151.023] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="239__C~1.PRO")) returned 0x7d3018 [0151.023] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="239__C~1.PRO")) returned 0 [0151.023] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0151.024] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\239__connections_cellular_mtc touch (lebanon)_i0$(__mvid)@wap.provxml")) returned 1 [0151.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\239__connections_cellular_mtc touch (lebanon)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.025] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="23__CO~1.PRO")) returned 1 [0151.033] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\23__connections_cellular_vodafone au (australia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.033] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.034] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0151.034] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.034] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0151.101] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0151.103] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0151.104] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.128] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.139] CloseHandle (hObject=0x1fc) returned 1 [0151.139] CloseHandle (hObject=0x204) returned 1 [0151.141] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\23__connections_cellular_vodafone au (australia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0151.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0151.142] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="23__CO~1.PRO")) returned 0x7d2c98 [0151.142] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="23__CO~1.PRO")) returned 0 [0151.142] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0151.142] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\23__connections_cellular_vodafone au (australia)_i0$(__mvid)@wap.provxml")) returned 1 [0151.143] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\23__connections_cellular_vodafone au (australia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.143] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml", cAlternateFileName="240__C~1.PRO")) returned 1 [0151.144] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\240__connections_cellular_vodacom lesotho (lesotho)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.144] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.144] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0151.144] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.145] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0151.211] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0151.215] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0151.216] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.238] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.249] CloseHandle (hObject=0x204) returned 1 [0151.249] CloseHandle (hObject=0x1fc) returned 1 [0151.251] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\240__connections_cellular_vodacom lesotho (lesotho)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0151.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0151.252] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml", cAlternateFileName="240__C~1.PRO")) returned 0x7d2b58 [0151.252] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml", cAlternateFileName="240__C~1.PRO")) returned 0 [0151.252] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0151.253] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\240__connections_cellular_vodacom lesotho (lesotho)_i0$(__mvid)@wap.provxml")) returned 1 [0151.254] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\240__connections_cellular_vodacom lesotho (lesotho)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.254] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="241__C~1.PRO")) returned 1 [0151.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\241__connections_cellular_libyana (libya)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.255] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc [0151.255] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.255] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0151.328] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bc, lpOverlapped=0x0) returned 1 [0151.332] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0151.333] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.355] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.366] CloseHandle (hObject=0x1fc) returned 1 [0151.367] CloseHandle (hObject=0x204) returned 1 [0151.368] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\241__connections_cellular_libyana (libya)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0151.369] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0151.369] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="241__C~1.PRO")) returned 0x7d3018 [0151.369] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="241__C~1.PRO")) returned 0 [0151.369] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0151.369] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\241__connections_cellular_libyana (libya)_i0$(__mvid)@wap.provxml")) returned 1 [0151.370] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\241__connections_cellular_libyana (libya)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.370] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="242__C~1.PRO")) returned 1 [0151.370] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\242__connections_cellular_a1 mobilkom (liechtenstein)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.371] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.371] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0151.371] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.372] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0151.449] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0151.450] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0151.452] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.551] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.562] CloseHandle (hObject=0x204) returned 1 [0151.562] CloseHandle (hObject=0x1fc) returned 1 [0151.574] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\242__connections_cellular_a1 mobilkom (liechtenstein)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0151.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0151.586] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="242__C~1.PRO")) returned 0x7d2d58 [0151.586] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="242__C~1.PRO")) returned 0 [0151.586] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0151.586] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\242__connections_cellular_a1 mobilkom (liechtenstein)_i0$(__mvid)@wap.provxml")) returned 1 [0151.587] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\242__connections_cellular_a1 mobilkom (liechtenstein)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.587] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="243__Connections_Cellular_Bite Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="243__C~1.PRO")) returned 1 [0151.588] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\243__Connections_Cellular_Bite Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\243__connections_cellular_bite lietuva (lithuania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0151.588] CloseHandle (hObject=0xffffffff) returned 1 [0151.588] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\243__Connections_Cellular_Bite Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\243__connections_cellular_bite lietuva (lithuania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQzX19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE4pZXR1dmEgKE4pdG21YW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqzx19d3256zwn01w96c19dzw4sdw42cl9c1xrlie4pzxr1dmegke4pdg21yw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0151.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQzX19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE4pZXR1dmEgKE4pdG21YW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqzx19d3256zwn01w96c19dzw4sdw42cl9c1xrlie4pzxr1dmegke4pdg21yw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0151.588] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\243__Connections_Cellular_Bite Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x510046, ftCreationTime.dwLowDateTime=0x13, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x7cab50, ftLastAccessTime.dwHighDateTime=0x39, ftLastWriteTime.dwLowDateTime=0x7c028c, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x48, nFileSizeLow=0x6c0069, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="", cAlternateFileName="\x8cU\x08\x02ào\x08\x02")) returned 0xffffffff [0151.588] FindNextFileA (in: hFindFile=0xffffffff, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x510046, ftCreationTime.dwLowDateTime=0x13, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x7cab50, ftLastAccessTime.dwHighDateTime=0x39, ftLastWriteTime.dwLowDateTime=0x7c028c, ftLastWriteTime.dwHighDateTime=0x80, nFileSizeHigh=0x48, nFileSizeLow=0x6c0069, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="", cAlternateFileName="\x8cU\x08\x02ào\x08\x02")) returned 0 [0151.589] FindClose (in: hFindFile=0xffffffff | out: hFindFile=0xffffffff) returned 0 [0151.589] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime")) returned 0 [0151.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\243__Connections_Cellular_Bite Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\243__connections_cellular_bite lietuva (lithuania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.589] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x302, dwReserved0=0x0, dwReserved1=0x0, cFileName="244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="244__C~1.PRO")) returned 1 [0151.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\244__connections_cellular_omnitel (lithuania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.590] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x302 [0151.590] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.590] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0151.721] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x302, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x302, lpOverlapped=0x0) returned 1 [0151.757] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0151.758] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.780] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.791] CloseHandle (hObject=0x1fc) returned 1 [0151.791] CloseHandle (hObject=0x204) returned 1 [0151.793] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\244__connections_cellular_omnitel (lithuania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0151.793] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0151.796] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x302, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="244__C~1.PRO")) returned 0x7d3018 [0151.796] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x302, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="244__C~1.PRO")) returned 0 [0151.796] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0151.796] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\244__connections_cellular_omnitel (lithuania)_i0$(__mvid)@wap.provxml")) returned 1 [0151.797] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\244__connections_cellular_omnitel (lithuania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.797] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="245__C~1.PRO")) returned 1 [0151.797] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\245__connections_cellular_tele2 (lithuania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.798] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.798] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0151.798] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.798] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0151.864] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0151.907] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0151.908] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0151.931] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0151.942] CloseHandle (hObject=0x204) returned 1 [0151.942] CloseHandle (hObject=0x1fc) returned 1 [0151.943] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\245__connections_cellular_tele2 (lithuania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0151.944] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0151.944] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="245__C~1.PRO")) returned 0x7d2998 [0151.944] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="245__C~1.PRO")) returned 0 [0151.944] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0151.944] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\245__connections_cellular_tele2 (lithuania)_i0$(__mvid)@wap.provxml")) returned 1 [0151.945] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\245__connections_cellular_tele2 (lithuania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0151.945] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="246__C~1.PRO")) returned 1 [0151.946] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\246__connections_cellular_tele2 (lithuania)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0151.946] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0151.946] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0151.946] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0151.947] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.015] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0152.018] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0152.019] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.042] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.055] CloseHandle (hObject=0x1fc) returned 1 [0152.056] CloseHandle (hObject=0x204) returned 1 [0152.057] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\246__connections_cellular_tele2 (lithuania)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0152.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0152.058] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="246__C~1.PRO")) returned 0x7d2c58 [0152.058] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="246__C~1.PRO")) returned 0 [0152.058] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0152.058] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\246__connections_cellular_tele2 (lithuania)_i1$(__mvid)@wap.provxml")) returned 1 [0152.059] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\246__connections_cellular_tele2 (lithuania)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0152.059] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="247__C~1.PRO")) returned 1 [0152.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\247__connections_cellular_tango (luxembourg)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.060] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.060] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x340 [0152.060] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.060] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.158] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x340, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x340, lpOverlapped=0x0) returned 1 [0152.159] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0152.160] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.182] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.193] CloseHandle (hObject=0x204) returned 1 [0152.194] CloseHandle (hObject=0x1fc) returned 1 [0152.195] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\247__connections_cellular_tango (luxembourg)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0152.195] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0152.195] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="247__C~1.PRO")) returned 0x7d3098 [0152.196] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="247__C~1.PRO")) returned 0 [0152.196] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0152.196] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\247__connections_cellular_tango (luxembourg)_i0$(__mvid)@wap.provxml")) returned 1 [0152.197] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\247__connections_cellular_tango (luxembourg)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0152.197] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="248__C~1.PRO")) returned 1 [0152.197] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\248__connections_cellular_orange (luxembourg)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.197] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.198] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0152.198] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.198] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.267] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0152.269] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0152.270] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.292] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.328] CloseHandle (hObject=0x1fc) returned 1 [0152.328] CloseHandle (hObject=0x204) returned 1 [0152.329] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\248__connections_cellular_orange (luxembourg)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0152.330] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0152.330] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="248__C~1.PRO")) returned 0x7d3018 [0152.330] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="248__C~1.PRO")) returned 0 [0152.330] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0152.330] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\248__connections_cellular_orange (luxembourg)_i0$(__mvid)@wap.provxml")) returned 1 [0152.331] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\248__connections_cellular_orange (luxembourg)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0152.331] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="249__C~1.PRO")) returned 1 [0152.331] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\249__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.332] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.332] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0152.332] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.332] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.396] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0152.400] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0152.401] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.424] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.436] CloseHandle (hObject=0x204) returned 1 [0152.437] CloseHandle (hObject=0x1fc) returned 1 [0152.438] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\249__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0152.438] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0152.438] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="249__C~1.PRO")) returned 0x7d2998 [0152.439] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="249__C~1.PRO")) returned 0 [0152.439] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0152.439] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\249__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml")) returned 1 [0152.440] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\249__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0152.440] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="24__CE~1.PRO")) returned 1 [0152.440] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\24__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.441] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.441] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d3 [0152.441] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.441] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.528] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d3, lpOverlapped=0x0) returned 1 [0152.530] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0152.531] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.555] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.566] CloseHandle (hObject=0x1fc) returned 1 [0152.566] CloseHandle (hObject=0x204) returned 1 [0152.567] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\24__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0 [0152.568] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0x20 [0152.568] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="24__CE~1.PRO")) returned 0x7d2a58 [0152.568] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="24__CE~1.PRO")) returned 0 [0152.568] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0152.569] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\24__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0152.569] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\24__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0152.570] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="250__C~1.PRO")) returned 1 [0152.570] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\250__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.570] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.570] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x283 [0152.570] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.571] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.721] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x283, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x283, lpOverlapped=0x0) returned 1 [0152.724] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0152.725] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.751] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.762] CloseHandle (hObject=0x204) returned 1 [0152.762] CloseHandle (hObject=0x1fc) returned 1 [0152.763] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\250__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0152.764] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0152.764] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="250__C~1.PRO")) returned 0x7d3018 [0152.764] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="250__C~1.PRO")) returned 0 [0152.764] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0152.764] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\250__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml")) returned 1 [0152.765] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\250__connections_cellular_ctm (macao sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0152.765] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="251__C~1.PRO")) returned 1 [0152.766] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\251__connections_cellular_hutchison - 3 (macao sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.766] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.766] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0152.766] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.767] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.833] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0152.835] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0152.836] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.858] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.869] CloseHandle (hObject=0x1fc) returned 1 [0152.869] CloseHandle (hObject=0x204) returned 1 [0152.871] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\251__connections_cellular_hutchison - 3 (macao sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0152.871] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0152.872] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="251__C~1.PRO")) returned 0x7d2a58 [0152.873] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="251__C~1.PRO")) returned 0 [0152.873] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0152.873] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\251__connections_cellular_hutchison - 3 (macao sar)_i0$(__mvid)@wap.provxml")) returned 1 [0152.874] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\251__connections_cellular_hutchison - 3 (macao sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0152.874] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="252__C~1.PRO")) returned 1 [0152.874] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\252__connections_cellular_smartone (macao sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.874] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.875] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0152.875] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.875] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0152.944] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0152.945] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0152.946] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0152.972] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0152.983] CloseHandle (hObject=0x204) returned 1 [0152.983] CloseHandle (hObject=0x1fc) returned 1 [0152.985] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\252__connections_cellular_smartone (macao sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0152.986] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0152.986] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="252__C~1.PRO")) returned 0x7d2a98 [0152.986] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="252__C~1.PRO")) returned 0 [0152.986] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0152.987] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\252__connections_cellular_smartone (macao sar)_i0$(__mvid)@wap.provxml")) returned 1 [0152.988] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\252__connections_cellular_smartone (macao sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0152.988] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml", cAlternateFileName="253__C~1.PRO")) returned 1 [0152.988] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\253__connections_cellular_t-mobile macedonia (macedonia, fyro)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0152.988] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0152.988] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x361 [0152.988] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0152.989] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.088] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x361, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x361, lpOverlapped=0x0) returned 1 [0153.089] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0153.091] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.114] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.125] CloseHandle (hObject=0x1fc) returned 1 [0153.125] CloseHandle (hObject=0x204) returned 1 [0153.126] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\253__connections_cellular_t-mobile macedonia (macedonia, fyro)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0153.127] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0153.127] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml", cAlternateFileName="253__C~1.PRO")) returned 0x7d2a18 [0153.127] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml", cAlternateFileName="253__C~1.PRO")) returned 0 [0153.127] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0153.127] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\253__connections_cellular_t-mobile macedonia (macedonia, fyro)_i0$(__mvid)@wap.provxml")) returned 1 [0153.128] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\253__connections_cellular_t-mobile macedonia (macedonia, fyro)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0153.128] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="254__C~1.PRO")) returned 1 [0153.129] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\254__connections_cellular_vip operator (republic of macedonia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.129] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.138] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x368 [0153.138] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.139] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.220] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x368, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x368, lpOverlapped=0x0) returned 1 [0153.225] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0153.226] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.248] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.259] CloseHandle (hObject=0x204) returned 1 [0153.259] CloseHandle (hObject=0x1fc) returned 1 [0153.260] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\254__connections_cellular_vip operator (republic of macedonia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0153.261] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0153.261] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="254__C~1.PRO")) returned 0x7d2998 [0153.262] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="254__C~1.PRO")) returned 0 [0153.262] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0153.262] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\254__connections_cellular_vip operator (republic of macedonia)_i0$(__mvid)@wap.provxml")) returned 1 [0153.295] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\254__connections_cellular_vip operator (republic of macedonia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0153.296] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="255__C~1.PRO")) returned 1 [0153.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\255__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.301] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0153.301] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.301] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.367] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0153.368] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0153.369] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.393] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.404] CloseHandle (hObject=0x1fc) returned 1 [0153.404] CloseHandle (hObject=0x204) returned 1 [0153.405] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\255__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0153.406] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0153.406] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="255__C~1.PRO")) returned 0x7d2998 [0153.406] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="255__C~1.PRO")) returned 0 [0153.406] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0153.406] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\255__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0153.407] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\255__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0153.407] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="256__C~1.PRO")) returned 1 [0153.408] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\256__connections_cellular_celcom malaysia (malaysia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.408] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.408] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0153.408] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.409] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.488] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0153.490] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0153.491] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.515] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.526] CloseHandle (hObject=0x204) returned 1 [0153.526] CloseHandle (hObject=0x1fc) returned 1 [0153.527] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\256__connections_cellular_celcom malaysia (malaysia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0153.532] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0153.533] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="256__C~1.PRO")) returned 0x7d2a18 [0153.533] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="256__C~1.PRO")) returned 0 [0153.533] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0153.533] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\256__connections_cellular_celcom malaysia (malaysia)_i0$(__mvid)@wap.provxml")) returned 1 [0153.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\256__connections_cellular_celcom malaysia (malaysia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0153.534] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="257__C~1.PRO")) returned 1 [0153.534] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\257__connections_cellular_digi (malaysia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.538] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.538] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x280 [0153.538] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.538] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.682] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0153.684] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0153.685] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.708] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.719] CloseHandle (hObject=0x1fc) returned 1 [0153.720] CloseHandle (hObject=0x204) returned 1 [0153.721] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\257__connections_cellular_digi (malaysia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0153.722] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0153.722] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="257__C~1.PRO")) returned 0x7d3018 [0153.722] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="257__C~1.PRO")) returned 0 [0153.722] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0153.722] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\257__connections_cellular_digi (malaysia)_i0$(__mvid)@wap.provxml")) returned 1 [0153.723] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\257__connections_cellular_digi (malaysia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0153.723] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="258__C~1.PRO")) returned 1 [0153.724] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\258__connections_cellular_digi (malaysia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.724] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.724] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x280 [0153.724] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.725] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.790] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0153.792] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0153.793] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.816] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.828] CloseHandle (hObject=0x204) returned 1 [0153.828] CloseHandle (hObject=0x1fc) returned 1 [0153.829] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\258__connections_cellular_digi (malaysia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0153.830] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0153.830] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="258__C~1.PRO")) returned 0x7d3018 [0153.830] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="258__C~1.PRO")) returned 0 [0153.830] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0153.830] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\258__connections_cellular_digi (malaysia)_i1$(__mvid)@wap.provxml")) returned 1 [0153.831] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\258__connections_cellular_digi (malaysia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0153.831] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="259__C~1.PRO")) returned 1 [0153.832] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\259__connections_cellular_maxis (malaysia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.832] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.832] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc [0153.832] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.833] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0153.898] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bc, lpOverlapped=0x0) returned 1 [0153.900] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0153.901] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0153.925] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0153.935] CloseHandle (hObject=0x1fc) returned 1 [0153.936] CloseHandle (hObject=0x204) returned 1 [0153.937] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\259__connections_cellular_maxis (malaysia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0153.937] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0153.938] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="259__C~1.PRO")) returned 0x7d2c98 [0153.938] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="259__C~1.PRO")) returned 0 [0153.938] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0153.938] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\259__connections_cellular_maxis (malaysia)_i0$(__mvid)@wap.provxml")) returned 1 [0153.939] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\259__connections_cellular_maxis (malaysia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0153.939] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="25__CE~1.PRO")) returned 1 [0153.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\25__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0153.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0153.940] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0153.940] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0153.940] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.039] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0154.041] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0154.042] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.065] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.077] CloseHandle (hObject=0x204) returned 1 [0154.077] CloseHandle (hObject=0x1fc) returned 1 [0154.078] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\25__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0154.079] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0154.079] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="25__CE~1.PRO")) returned 0x7d2ad8 [0154.079] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="25__CE~1.PRO")) returned 0 [0154.079] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0154.079] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\25__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0154.080] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\25__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0154.081] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="260__C~1.PRO")) returned 1 [0154.081] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\260__connections_cellular_maxis (malaysia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.081] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.081] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x300 [0154.081] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.082] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.147] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x300, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0154.149] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0154.163] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.187] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.197] CloseHandle (hObject=0x1fc) returned 1 [0154.198] CloseHandle (hObject=0x204) returned 1 [0154.199] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\260__connections_cellular_maxis (malaysia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0154.200] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0154.200] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="260__C~1.PRO")) returned 0x7d3018 [0154.200] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="260__C~1.PRO")) returned 0 [0154.200] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0154.200] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\260__connections_cellular_maxis (malaysia)_i1$(__mvid)@wap.provxml")) returned 1 [0154.201] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\260__connections_cellular_maxis (malaysia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0154.201] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="261__C~1.PRO")) returned 1 [0154.202] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\261__connections_cellular_maxis (malaysia)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.202] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.202] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bf [0154.202] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.203] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.269] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bf, lpOverlapped=0x0) returned 1 [0154.271] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0154.272] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.295] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.305] CloseHandle (hObject=0x204) returned 1 [0154.306] CloseHandle (hObject=0x1fc) returned 1 [0154.307] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\261__connections_cellular_maxis (malaysia)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0154.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0154.308] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="261__C~1.PRO")) returned 0x7d2c98 [0154.308] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="261__C~1.PRO")) returned 0 [0154.308] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0154.308] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\261__connections_cellular_maxis (malaysia)_i2$(__mvid)@wap.provxml")) returned 1 [0154.310] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\261__connections_cellular_maxis (malaysia)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0154.310] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="262__C~1.PRO")) returned 1 [0154.310] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\262__connections_cellular_timecel (malaysia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.310] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.311] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0154.311] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.311] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.389] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0154.391] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0154.392] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.453] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.465] CloseHandle (hObject=0x1fc) returned 1 [0154.465] CloseHandle (hObject=0x204) returned 1 [0154.467] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\262__connections_cellular_timecel (malaysia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0154.467] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0154.467] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="262__C~1.PRO")) returned 0x7d3018 [0154.467] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="262__C~1.PRO")) returned 0 [0154.467] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0154.468] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\262__connections_cellular_timecel (malaysia)_i0$(__mvid)@wap.provxml")) returned 1 [0154.469] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\262__connections_cellular_timecel (malaysia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0154.469] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="263__C~1.PRO")) returned 1 [0154.469] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\263__connections_cellular_u mobile (malaysia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.469] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.469] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c4 [0154.470] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.470] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.661] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c4, lpOverlapped=0x0) returned 1 [0154.663] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0154.665] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.691] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.705] CloseHandle (hObject=0x204) returned 1 [0154.706] CloseHandle (hObject=0x1fc) returned 1 [0154.707] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\263__connections_cellular_u mobile (malaysia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0154.707] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0154.707] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="263__C~1.PRO")) returned 0x7d3018 [0154.708] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="263__C~1.PRO")) returned 0 [0154.708] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0154.708] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\263__connections_cellular_u mobile (malaysia)_i0$(__mvid)@wap.provxml")) returned 1 [0154.709] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\263__connections_cellular_u mobile (malaysia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0154.709] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="264__C~1.PRO")) returned 1 [0154.709] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\264__connections_cellular_go mobile (malta)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.709] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.710] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0154.710] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.710] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.771] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0154.773] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0154.773] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.797] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.808] CloseHandle (hObject=0x1fc) returned 1 [0154.808] CloseHandle (hObject=0x204) returned 1 [0154.810] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\264__connections_cellular_go mobile (malta)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0154.810] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0154.810] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="264__C~1.PRO")) returned 0x7d2d58 [0154.810] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="264__C~1.PRO")) returned 0 [0154.811] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0154.811] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\264__connections_cellular_go mobile (malta)_i0$(__mvid)@wap.provxml")) returned 1 [0154.812] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\264__connections_cellular_go mobile (malta)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0154.812] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml", cAlternateFileName="265__C~1.PRO")) returned 1 [0154.812] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\265__connections_cellular_go mobile (malta)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.812] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.813] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x284 [0154.813] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.813] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.878] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x284, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x284, lpOverlapped=0x0) returned 1 [0154.880] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0154.881] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0154.904] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0154.915] CloseHandle (hObject=0x204) returned 1 [0154.915] CloseHandle (hObject=0x1fc) returned 1 [0154.916] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\265__connections_cellular_go mobile (malta)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0154.917] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0154.917] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml", cAlternateFileName="265__C~1.PRO")) returned 0x7d3098 [0154.917] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml", cAlternateFileName="265__C~1.PRO")) returned 0 [0154.917] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0154.917] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\265__connections_cellular_go mobile (malta)_i1$(__mvid)@wap.provxml")) returned 1 [0154.919] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\265__connections_cellular_go mobile (malta)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0154.919] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="266__C~1.PRO")) returned 1 [0154.920] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\266__connections_cellular_vodafone malta (malta)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0154.920] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0154.920] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0154.920] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0154.920] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0154.993] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0154.994] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0154.995] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0155.019] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0155.030] CloseHandle (hObject=0x1fc) returned 1 [0155.030] CloseHandle (hObject=0x204) returned 1 [0155.031] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\266__connections_cellular_vodafone malta (malta)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0155.032] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0155.032] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="266__C~1.PRO")) returned 0x7d3018 [0155.032] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="266__C~1.PRO")) returned 0 [0155.032] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0155.032] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\266__connections_cellular_vodafone malta (malta)_i0$(__mvid)@wap.provxml")) returned 1 [0155.033] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\266__connections_cellular_vodafone malta (malta)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0155.033] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="267__C~1.PRO")) returned 1 [0155.034] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\267__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0155.034] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0155.034] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0155.034] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0155.035] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0155.212] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0155.214] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0155.215] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0155.238] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0155.249] CloseHandle (hObject=0x204) returned 1 [0155.250] CloseHandle (hObject=0x1fc) returned 1 [0155.251] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\267__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0155.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0155.252] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="267__C~1.PRO")) returned 0x7d2c18 [0155.252] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="267__C~1.PRO")) returned 0 [0155.252] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0155.252] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\267__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0155.253] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\267__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0155.253] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="268__C~1.PRO")) returned 1 [0155.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\268__connections_cellular_telcel gsm (mexico)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0155.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0155.255] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0155.255] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0155.255] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0155.322] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0155.324] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0155.325] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0155.348] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0155.359] CloseHandle (hObject=0x1fc) returned 1 [0155.360] CloseHandle (hObject=0x204) returned 1 [0155.361] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\268__connections_cellular_telcel gsm (mexico)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0155.361] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0155.361] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="268__C~1.PRO")) returned 0x7d2c18 [0155.362] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="268__C~1.PRO")) returned 0 [0155.362] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0155.362] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\268__connections_cellular_telcel gsm (mexico)_i0$(__mvid)@wap.provxml")) returned 1 [0155.363] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\268__connections_cellular_telcel gsm (mexico)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0155.363] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="269__C~1.PRO")) returned 1 [0155.363] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\269__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0155.365] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0155.365] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d3 [0155.365] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0155.365] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0155.432] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d3, lpOverlapped=0x0) returned 1 [0155.433] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0155.434] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0155.458] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0155.469] CloseHandle (hObject=0x204) returned 1 [0155.469] CloseHandle (hObject=0x1fc) returned 1 [0155.470] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\269__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0155.471] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0155.471] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="269__C~1.PRO")) returned 0x7d2c58 [0155.471] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="269__C~1.PRO")) returned 0 [0155.471] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0155.471] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\269__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0155.472] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\269__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0155.473] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="26__CO~1.PRO")) returned 1 [0155.473] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\26__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0155.473] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0155.473] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x33b [0155.474] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0155.474] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0155.648] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x33b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x33b, lpOverlapped=0x0) returned 1 [0155.650] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x340, lpOverlapped=0x0) returned 1 [0155.651] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0155.674] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0155.689] CloseHandle (hObject=0x1fc) returned 1 [0155.689] CloseHandle (hObject=0x204) returned 1 [0155.691] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\26__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0155.691] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0155.691] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="26__CO~1.PRO")) returned 0x7d3018 [0155.692] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="26__CO~1.PRO")) returned 0 [0155.692] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0155.692] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\26__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0155.693] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\26__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0155.693] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x317, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="270__C~1.PRO")) returned 1 [0155.693] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\270__connections_cellular_telefonica (mexico)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0155.693] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0155.694] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x317 [0155.694] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0155.694] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0155.760] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x317, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x317, lpOverlapped=0x0) returned 1 [0155.762] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0155.763] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0155.787] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0155.798] CloseHandle (hObject=0x204) returned 1 [0155.798] CloseHandle (hObject=0x1fc) returned 1 [0155.799] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\270__connections_cellular_telefonica (mexico)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0155.800] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0155.800] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x317, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="270__C~1.PRO")) returned 0x7d3018 [0155.800] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x317, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="270__C~1.PRO")) returned 0 [0155.800] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0155.801] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\270__connections_cellular_telefonica (mexico)_i0$(__mvid)@wap.provxml")) returned 1 [0155.802] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\270__connections_cellular_telefonica (mexico)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0155.802] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="271__C~1.PRO")) returned 1 [0155.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\271__connections_cellular_telenor (montenegro)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0155.805] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0155.805] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x389 [0155.805] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0155.806] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0155.874] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x389, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x389, lpOverlapped=0x0) returned 1 [0156.073] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0156.074] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0156.097] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0156.110] CloseHandle (hObject=0x1fc) returned 1 [0156.111] CloseHandle (hObject=0x204) returned 1 [0156.112] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\271__connections_cellular_telenor (montenegro)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0156.113] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0156.113] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="271__C~1.PRO")) returned 0x7d2c18 [0156.113] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="271__C~1.PRO")) returned 0 [0156.113] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0156.113] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\271__connections_cellular_telenor (montenegro)_i0$(__mvid)@wap.provxml")) returned 1 [0156.115] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\271__connections_cellular_telenor (montenegro)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0156.115] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="272__C~1.PRO")) returned 1 [0156.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\272__connections_cellular_t-mobile (montenegro)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0156.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0156.116] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x307 [0156.116] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0156.116] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0156.185] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x307, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x307, lpOverlapped=0x0) returned 1 [0156.196] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0156.197] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0156.227] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0156.238] CloseHandle (hObject=0x204) returned 1 [0156.238] CloseHandle (hObject=0x1fc) returned 1 [0156.240] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\272__connections_cellular_t-mobile (montenegro)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0156.241] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0156.241] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="272__C~1.PRO")) returned 0x7d3098 [0156.241] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="272__C~1.PRO")) returned 0 [0156.241] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0156.241] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\272__connections_cellular_t-mobile (montenegro)_i0$(__mvid)@wap.provxml")) returned 1 [0156.242] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\272__connections_cellular_t-mobile (montenegro)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0156.242] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="273__C~1.PRO")) returned 1 [0156.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\273__connections_cellular_crnogorski telekom (montenegro)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0156.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0156.243] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x357 [0156.243] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0156.244] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0156.482] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x357, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x357, lpOverlapped=0x0) returned 1 [0156.977] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0156.979] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.001] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.018] CloseHandle (hObject=0x1fc) returned 1 [0157.018] CloseHandle (hObject=0x204) returned 1 [0157.020] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\273__connections_cellular_crnogorski telekom (montenegro)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0157.020] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0157.021] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="273__C~1.PRO")) returned 0x7d3018 [0157.021] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="273__C~1.PRO")) returned 0 [0157.021] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0157.021] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\273__connections_cellular_crnogorski telekom (montenegro)_i0$(__mvid)@wap.provxml")) returned 1 [0157.022] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\273__connections_cellular_crnogorski telekom (montenegro)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0157.022] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="274__C~1.PRO")) returned 1 [0157.023] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\274__connections_cellular_maroc telecom (morocco)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.023] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.023] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0157.023] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.024] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.098] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0157.129] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0157.130] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.153] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.163] CloseHandle (hObject=0x204) returned 1 [0157.164] CloseHandle (hObject=0x1fc) returned 1 [0157.165] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\274__connections_cellular_maroc telecom (morocco)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0157.168] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0157.168] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="274__C~1.PRO")) returned 0x7d2ad8 [0157.168] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="274__C~1.PRO")) returned 0 [0157.168] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0157.168] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\274__connections_cellular_maroc telecom (morocco)_i0$(__mvid)@wap.provxml")) returned 1 [0157.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\274__connections_cellular_maroc telecom (morocco)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0157.170] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml", cAlternateFileName="275__C~1.PRO")) returned 1 [0157.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\275__connections_cellular_vodacom mozambique (mozambique)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.170] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0157.171] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.171] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.237] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0157.243] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0157.245] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.269] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.280] CloseHandle (hObject=0x1fc) returned 1 [0157.281] CloseHandle (hObject=0x204) returned 1 [0157.282] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\275__connections_cellular_vodacom mozambique (mozambique)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0157.282] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0157.283] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml", cAlternateFileName="275__C~1.PRO")) returned 0x7d3018 [0157.283] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml", cAlternateFileName="275__C~1.PRO")) returned 0 [0157.283] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0157.283] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\275__connections_cellular_vodacom mozambique (mozambique)_i0$(__mvid)@wap.provxml")) returned 1 [0157.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\275__connections_cellular_vodacom mozambique (mozambique)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0157.284] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="276__C~1.PRO")) returned 1 [0157.284] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\276__connections_cellular_kpn-hi (netherlands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.287] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.287] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0157.288] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.288] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.352] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0157.355] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0157.355] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.378] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.390] CloseHandle (hObject=0x204) returned 1 [0157.390] CloseHandle (hObject=0x1fc) returned 1 [0157.391] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\276__connections_cellular_kpn-hi (netherlands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0157.391] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0157.391] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="276__C~1.PRO")) returned 0x7d3018 [0157.391] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="276__C~1.PRO")) returned 0 [0157.391] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0157.392] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\276__connections_cellular_kpn-hi (netherlands)_i0$(__mvid)@wap.provxml")) returned 1 [0157.393] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\276__connections_cellular_kpn-hi (netherlands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0157.393] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="277__C~1.PRO")) returned 1 [0157.393] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\277__connections_cellular_kpn-hi (netherlands)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.393] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.393] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e2 [0157.393] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.394] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.531] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e2, lpOverlapped=0x0) returned 1 [0157.533] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0157.534] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.558] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.568] CloseHandle (hObject=0x1fc) returned 1 [0157.569] CloseHandle (hObject=0x204) returned 1 [0157.570] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\277__connections_cellular_kpn-hi (netherlands)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0157.571] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0157.571] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="277__C~1.PRO")) returned 0x7d3018 [0157.571] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="277__C~1.PRO")) returned 0 [0157.571] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0157.571] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\277__connections_cellular_kpn-hi (netherlands)_i1$(__mvid)@wap.provxml")) returned 1 [0157.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\277__connections_cellular_kpn-hi (netherlands)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0157.573] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml", cAlternateFileName="278__C~1.PRO")) returned 1 [0157.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\278__connections_cellular_kpn-hi (netherlands)_i10$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.574] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0157.574] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.574] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.691] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0157.693] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0157.694] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.720] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.733] CloseHandle (hObject=0x204) returned 1 [0157.734] CloseHandle (hObject=0x1fc) returned 1 [0157.735] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\278__connections_cellular_kpn-hi (netherlands)_i10$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0157.736] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0157.736] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml", cAlternateFileName="278__C~1.PRO")) returned 0x7d2c98 [0157.736] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml", cAlternateFileName="278__C~1.PRO")) returned 0 [0157.736] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0157.736] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\278__connections_cellular_kpn-hi (netherlands)_i10$(__mvid)@wap.provxml")) returned 1 [0157.737] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\278__connections_cellular_kpn-hi (netherlands)_i10$(__mvid)@wap.provxml")) returned 0xffffffff [0157.738] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml", cAlternateFileName="279__C~1.PRO")) returned 1 [0157.738] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\279__connections_cellular_kpn-hi (netherlands)_i11$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.739] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.739] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0157.739] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.740] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.807] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0157.808] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0157.809] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.832] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.843] CloseHandle (hObject=0x1fc) returned 1 [0157.843] CloseHandle (hObject=0x204) returned 1 [0157.844] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\279__connections_cellular_kpn-hi (netherlands)_i11$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0157.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0157.845] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml", cAlternateFileName="279__C~1.PRO")) returned 0x7d3018 [0157.845] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml", cAlternateFileName="279__C~1.PRO")) returned 0 [0157.845] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0157.845] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\279__connections_cellular_kpn-hi (netherlands)_i11$(__mvid)@wap.provxml")) returned 1 [0157.846] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\279__connections_cellular_kpn-hi (netherlands)_i11$(__mvid)@wap.provxml")) returned 0xffffffff [0157.846] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="27__CO~1.PRO")) returned 1 [0157.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\27__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.847] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x280 [0157.847] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.847] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0157.916] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0157.918] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0157.919] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0157.942] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0157.953] CloseHandle (hObject=0x204) returned 1 [0157.953] CloseHandle (hObject=0x1fc) returned 1 [0157.954] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\27__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0157.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0157.955] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="27__CO~1.PRO")) returned 0x7d3018 [0157.955] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="27__CO~1.PRO")) returned 0 [0157.956] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0157.956] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\27__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0157.957] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\27__connections_cellular_a1 (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0157.957] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml", cAlternateFileName="280__C~1.PRO")) returned 1 [0157.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\280__connections_cellular_kpn-hi (netherlands)_i12$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0157.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0157.958] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e8 [0157.958] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0157.958] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.057] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e8, lpOverlapped=0x0) returned 1 [0158.059] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0158.060] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.082] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.093] CloseHandle (hObject=0x1fc) returned 1 [0158.093] CloseHandle (hObject=0x204) returned 1 [0158.094] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\280__connections_cellular_kpn-hi (netherlands)_i12$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0158.095] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0158.095] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml", cAlternateFileName="280__C~1.PRO")) returned 0x7d2a58 [0158.095] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml", cAlternateFileName="280__C~1.PRO")) returned 0 [0158.095] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0158.095] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\280__connections_cellular_kpn-hi (netherlands)_i12$(__mvid)@wap.provxml")) returned 1 [0158.125] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\280__connections_cellular_kpn-hi (netherlands)_i12$(__mvid)@wap.provxml")) returned 0xffffffff [0158.125] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml", cAlternateFileName="281__C~1.PRO")) returned 1 [0158.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\281__connections_cellular_kpn-hi (netherlands)_i13$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.126] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0158.126] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.126] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.192] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0158.195] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0158.196] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.219] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.229] CloseHandle (hObject=0x204) returned 1 [0158.230] CloseHandle (hObject=0x1fc) returned 1 [0158.231] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\281__connections_cellular_kpn-hi (netherlands)_i13$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0158.232] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0158.232] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml", cAlternateFileName="281__C~1.PRO")) returned 0x7d2a58 [0158.232] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml", cAlternateFileName="281__C~1.PRO")) returned 0 [0158.232] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0158.232] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\281__connections_cellular_kpn-hi (netherlands)_i13$(__mvid)@wap.provxml")) returned 1 [0158.233] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\281__connections_cellular_kpn-hi (netherlands)_i13$(__mvid)@wap.provxml")) returned 0xffffffff [0158.233] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml", cAlternateFileName="282__C~1.PRO")) returned 1 [0158.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\282__connections_cellular_kpn-hi (netherlands)_i14$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.234] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0158.234] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.234] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.300] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0158.302] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0158.303] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.325] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.337] CloseHandle (hObject=0x1fc) returned 1 [0158.337] CloseHandle (hObject=0x204) returned 1 [0158.338] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\282__connections_cellular_kpn-hi (netherlands)_i14$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0158.339] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0158.339] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml", cAlternateFileName="282__C~1.PRO")) returned 0x7d2c18 [0158.339] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml", cAlternateFileName="282__C~1.PRO")) returned 0 [0158.339] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0158.340] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\282__connections_cellular_kpn-hi (netherlands)_i14$(__mvid)@wap.provxml")) returned 1 [0158.341] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\282__connections_cellular_kpn-hi (netherlands)_i14$(__mvid)@wap.provxml")) returned 0xffffffff [0158.341] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml", cAlternateFileName="283__C~1.PRO")) returned 1 [0158.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\283__connections_cellular_kpn-hi (netherlands)_i15$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.342] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2df [0158.342] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.342] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.430] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2df, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2df, lpOverlapped=0x0) returned 1 [0158.432] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0158.433] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.455] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.466] CloseHandle (hObject=0x204) returned 1 [0158.466] CloseHandle (hObject=0x1fc) returned 1 [0158.467] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\283__connections_cellular_kpn-hi (netherlands)_i15$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0158.468] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0158.468] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml", cAlternateFileName="283__C~1.PRO")) returned 0x7d2d58 [0158.468] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml", cAlternateFileName="283__C~1.PRO")) returned 0 [0158.468] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0158.469] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\283__connections_cellular_kpn-hi (netherlands)_i15$(__mvid)@wap.provxml")) returned 1 [0158.470] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\283__connections_cellular_kpn-hi (netherlands)_i15$(__mvid)@wap.provxml")) returned 0xffffffff [0158.470] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="284__C~1.PRO")) returned 1 [0158.470] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\284__connections_cellular_kpn-hi (netherlands)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.470] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.470] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0158.470] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.471] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.536] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0158.538] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0158.539] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.563] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.574] CloseHandle (hObject=0x1fc) returned 1 [0158.575] CloseHandle (hObject=0x204) returned 1 [0158.576] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\284__connections_cellular_kpn-hi (netherlands)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0158.577] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0158.577] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="284__C~1.PRO")) returned 0x7d2918 [0158.577] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="284__C~1.PRO")) returned 0 [0158.577] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0158.577] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\284__connections_cellular_kpn-hi (netherlands)_i2$(__mvid)@wap.provxml")) returned 1 [0158.578] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\284__connections_cellular_kpn-hi (netherlands)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0158.578] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml", cAlternateFileName="285__C~1.PRO")) returned 1 [0158.578] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\285__connections_cellular_kpn-hi (netherlands)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.579] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.579] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0158.579] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.579] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.717] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0158.719] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0158.720] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.743] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.754] CloseHandle (hObject=0x204) returned 1 [0158.754] CloseHandle (hObject=0x1fc) returned 1 [0158.756] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\285__connections_cellular_kpn-hi (netherlands)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0158.756] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0158.756] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml", cAlternateFileName="285__C~1.PRO")) returned 0x7d2cd8 [0158.756] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml", cAlternateFileName="285__C~1.PRO")) returned 0 [0158.757] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0158.757] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\285__connections_cellular_kpn-hi (netherlands)_i3$(__mvid)@wap.provxml")) returned 1 [0158.758] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\285__connections_cellular_kpn-hi (netherlands)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0158.758] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml", cAlternateFileName="286__C~1.PRO")) returned 1 [0158.758] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\286__connections_cellular_kpn-hi (netherlands)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.759] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.759] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d9 [0158.759] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.759] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.824] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d9, lpOverlapped=0x0) returned 1 [0158.829] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0158.830] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.852] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.864] CloseHandle (hObject=0x1fc) returned 1 [0158.864] CloseHandle (hObject=0x204) returned 1 [0158.865] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\286__connections_cellular_kpn-hi (netherlands)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0158.866] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0158.866] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml", cAlternateFileName="286__C~1.PRO")) returned 0x7d3018 [0158.866] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml", cAlternateFileName="286__C~1.PRO")) returned 0 [0158.866] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0158.866] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\286__connections_cellular_kpn-hi (netherlands)_i4$(__mvid)@wap.provxml")) returned 1 [0158.868] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\286__connections_cellular_kpn-hi (netherlands)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0158.868] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml", cAlternateFileName="287__C~1.PRO")) returned 1 [0158.870] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\287__connections_cellular_kpn-hi (netherlands)_i5$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.871] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.871] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dd [0158.871] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.871] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0158.936] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dd, lpOverlapped=0x0) returned 1 [0158.938] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0158.939] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0158.962] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0158.974] CloseHandle (hObject=0x204) returned 1 [0158.974] CloseHandle (hObject=0x1fc) returned 1 [0158.976] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\287__connections_cellular_kpn-hi (netherlands)_i5$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0158.976] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0158.976] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml", cAlternateFileName="287__C~1.PRO")) returned 0x7d3018 [0158.976] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml", cAlternateFileName="287__C~1.PRO")) returned 0 [0158.976] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0158.977] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\287__connections_cellular_kpn-hi (netherlands)_i5$(__mvid)@wap.provxml")) returned 1 [0158.978] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\287__connections_cellular_kpn-hi (netherlands)_i5$(__mvid)@wap.provxml")) returned 0xffffffff [0158.978] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml", cAlternateFileName="288__C~1.PRO")) returned 1 [0158.978] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\288__connections_cellular_kpn-hi (netherlands)_i6$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0158.978] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0158.979] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0158.979] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0158.979] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0159.097] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0159.099] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0159.100] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0159.121] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0159.132] CloseHandle (hObject=0x1fc) returned 1 [0159.132] CloseHandle (hObject=0x204) returned 1 [0159.134] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\288__connections_cellular_kpn-hi (netherlands)_i6$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0159.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0159.135] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml", cAlternateFileName="288__C~1.PRO")) returned 0x7d3098 [0159.135] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml", cAlternateFileName="288__C~1.PRO")) returned 0 [0159.135] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0159.135] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\288__connections_cellular_kpn-hi (netherlands)_i6$(__mvid)@wap.provxml")) returned 1 [0159.136] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\288__connections_cellular_kpn-hi (netherlands)_i6$(__mvid)@wap.provxml")) returned 0xffffffff [0159.136] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml", cAlternateFileName="289__C~1.PRO")) returned 1 [0159.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\289__connections_cellular_kpn-hi (netherlands)_i7$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0159.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0159.137] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0159.137] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0159.137] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0159.260] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0159.261] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0159.262] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0159.285] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0159.296] CloseHandle (hObject=0x204) returned 1 [0159.296] CloseHandle (hObject=0x1fc) returned 1 [0159.297] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\289__connections_cellular_kpn-hi (netherlands)_i7$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0159.298] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0159.298] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml", cAlternateFileName="289__C~1.PRO")) returned 0x7d2b58 [0159.298] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml", cAlternateFileName="289__C~1.PRO")) returned 0 [0159.298] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0159.299] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\289__connections_cellular_kpn-hi (netherlands)_i7$(__mvid)@wap.provxml")) returned 1 [0159.300] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\289__connections_cellular_kpn-hi (netherlands)_i7$(__mvid)@wap.provxml")) returned 0xffffffff [0159.300] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="28__CO~1.PRO")) returned 1 [0159.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\28__connections_cellular_hutchison - 3 (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0159.301] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0159.312] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x288 [0159.312] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0159.313] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0159.378] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x288, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x288, lpOverlapped=0x0) returned 1 [0159.379] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0159.380] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0159.403] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0159.415] CloseHandle (hObject=0x1fc) returned 1 [0159.415] CloseHandle (hObject=0x204) returned 1 [0159.417] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\28__connections_cellular_hutchison - 3 (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0159.418] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0159.418] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="28__CO~1.PRO")) returned 0x7d3018 [0159.418] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="28__CO~1.PRO")) returned 0 [0159.418] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0159.418] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\28__connections_cellular_hutchison - 3 (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0159.419] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\28__connections_cellular_hutchison - 3 (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0159.419] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml", cAlternateFileName="290__C~1.PRO")) returned 1 [0159.419] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\290__connections_cellular_kpn-hi (netherlands)_i8$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0159.419] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0159.420] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e3 [0159.420] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0159.420] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0159.484] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e3, lpOverlapped=0x0) returned 1 [0159.486] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0159.487] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0159.510] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0159.521] CloseHandle (hObject=0x204) returned 1 [0159.521] CloseHandle (hObject=0x1fc) returned 1 [0159.522] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\290__connections_cellular_kpn-hi (netherlands)_i8$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0159.523] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0159.523] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml", cAlternateFileName="290__C~1.PRO")) returned 0x7d3098 [0159.523] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml", cAlternateFileName="290__C~1.PRO")) returned 0 [0159.523] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0159.524] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\290__connections_cellular_kpn-hi (netherlands)_i8$(__mvid)@wap.provxml")) returned 1 [0159.525] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\290__connections_cellular_kpn-hi (netherlands)_i8$(__mvid)@wap.provxml")) returned 0xffffffff [0159.525] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml", cAlternateFileName="291__C~1.PRO")) returned 1 [0159.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\291__connections_cellular_kpn-hi (netherlands)_i9$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0159.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0159.526] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0159.526] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0159.526] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0159.716] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0159.718] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0159.722] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0159.747] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0159.761] CloseHandle (hObject=0x1fc) returned 1 [0159.761] CloseHandle (hObject=0x204) returned 1 [0159.763] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\291__connections_cellular_kpn-hi (netherlands)_i9$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0159.764] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0159.764] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml", cAlternateFileName="291__C~1.PRO")) returned 0x7d3018 [0159.765] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml", cAlternateFileName="291__C~1.PRO")) returned 0 [0159.765] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0159.765] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\291__connections_cellular_kpn-hi (netherlands)_i9$(__mvid)@wap.provxml")) returned 1 [0159.766] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\291__connections_cellular_kpn-hi (netherlands)_i9$(__mvid)@wap.provxml")) returned 0xffffffff [0159.766] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="292__C~1.PRO")) returned 1 [0159.766] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\292__connections_cellular_tele2 (netherlands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0159.767] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0159.767] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x294 [0159.767] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0159.768] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0159.835] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x294, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x294, lpOverlapped=0x0) returned 1 [0159.837] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0159.838] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0159.861] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0159.872] CloseHandle (hObject=0x204) returned 1 [0159.872] CloseHandle (hObject=0x1fc) returned 1 [0159.874] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\292__connections_cellular_tele2 (netherlands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0159.874] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0159.874] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="292__C~1.PRO")) returned 0x7d2c58 [0159.874] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="292__C~1.PRO")) returned 0 [0159.875] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0159.875] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\292__connections_cellular_tele2 (netherlands)_i0$(__mvid)@wap.provxml")) returned 1 [0159.876] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\292__connections_cellular_tele2 (netherlands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0159.876] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="293__C~1.PRO")) returned 1 [0159.876] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\293__connections_cellular_tele2 (netherlands)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0159.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0159.880] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0159.880] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0159.880] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.069] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0160.070] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0160.071] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.099] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.109] CloseHandle (hObject=0x1fc) returned 1 [0160.110] CloseHandle (hObject=0x204) returned 1 [0160.111] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\293__connections_cellular_tele2 (netherlands)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0160.113] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0160.113] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="293__C~1.PRO")) returned 0x7d29d8 [0160.113] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="293__C~1.PRO")) returned 0 [0160.113] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0160.113] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\293__connections_cellular_tele2 (netherlands)_i1$(__mvid)@wap.provxml")) returned 1 [0160.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\293__connections_cellular_tele2 (netherlands)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0160.114] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="294__C~1.PRO")) returned 1 [0160.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\294__connections_cellular_telfort (netherlands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.115] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d5 [0160.115] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.115] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.235] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d5, lpOverlapped=0x0) returned 1 [0160.237] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0160.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.262] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.273] CloseHandle (hObject=0x204) returned 1 [0160.273] CloseHandle (hObject=0x1fc) returned 1 [0160.274] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\294__connections_cellular_telfort (netherlands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0160.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0160.275] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="294__C~1.PRO")) returned 0x7d2b58 [0160.275] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="294__C~1.PRO")) returned 0 [0160.275] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0160.275] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\294__connections_cellular_telfort (netherlands)_i0$(__mvid)@wap.provxml")) returned 1 [0160.276] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\294__connections_cellular_telfort (netherlands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0160.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="295__C~1.PRO")) returned 1 [0160.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\295__connections_cellular_telfort (netherlands)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.277] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d8 [0160.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.278] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.345] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d8, lpOverlapped=0x0) returned 1 [0160.348] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0160.349] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.372] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.383] CloseHandle (hObject=0x1fc) returned 1 [0160.383] CloseHandle (hObject=0x204) returned 1 [0160.384] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\295__connections_cellular_telfort (netherlands)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0160.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0160.385] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="295__C~1.PRO")) returned 0x7d29d8 [0160.385] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="295__C~1.PRO")) returned 0 [0160.385] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0160.385] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\295__connections_cellular_telfort (netherlands)_i1$(__mvid)@wap.provxml")) returned 1 [0160.386] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\295__connections_cellular_telfort (netherlands)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0160.387] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="296__C~1.PRO")) returned 1 [0160.387] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\296__connections_cellular_telfort (netherlands)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.387] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.387] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0160.388] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.388] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.464] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0160.466] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0160.467] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.490] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.501] CloseHandle (hObject=0x204) returned 1 [0160.501] CloseHandle (hObject=0x1fc) returned 1 [0160.503] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\296__connections_cellular_telfort (netherlands)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0160.504] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0160.504] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="296__C~1.PRO")) returned 0x7d3018 [0160.504] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="296__C~1.PRO")) returned 0 [0160.504] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0160.505] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\296__connections_cellular_telfort (netherlands)_i2$(__mvid)@wap.provxml")) returned 1 [0160.505] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\296__connections_cellular_telfort (netherlands)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0160.506] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="297__C~1.PRO")) returned 1 [0160.506] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\297__connections_cellular_t-mobile netherlands (netherlands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.506] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.507] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e7 [0160.507] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.507] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.606] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e7, lpOverlapped=0x0) returned 1 [0160.661] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0160.662] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.685] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.696] CloseHandle (hObject=0x1fc) returned 1 [0160.696] CloseHandle (hObject=0x204) returned 1 [0160.697] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\297__connections_cellular_t-mobile netherlands (netherlands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0160.698] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0160.698] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="297__C~1.PRO")) returned 0x7d2ad8 [0160.698] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="297__C~1.PRO")) returned 0 [0160.698] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0160.699] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\297__connections_cellular_t-mobile netherlands (netherlands)_i0$(__mvid)@wap.provxml")) returned 1 [0160.700] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\297__connections_cellular_t-mobile netherlands (netherlands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0160.700] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="298__C~1.PRO")) returned 1 [0160.700] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\298__connections_cellular_vodafone nl (netherlands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.700] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.700] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35d [0160.700] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.701] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.763] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35d, lpOverlapped=0x0) returned 1 [0160.765] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0160.766] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.789] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.800] CloseHandle (hObject=0x204) returned 1 [0160.800] CloseHandle (hObject=0x1fc) returned 1 [0160.801] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\298__connections_cellular_vodafone nl (netherlands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0160.802] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0160.802] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="298__C~1.PRO")) returned 0x7d2918 [0160.802] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="298__C~1.PRO")) returned 0 [0160.802] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0160.802] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\298__connections_cellular_vodafone nl (netherlands)_i0$(__mvid)@wap.provxml")) returned 1 [0160.803] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\298__connections_cellular_vodafone nl (netherlands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0160.803] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="299__C~1.PRO")) returned 1 [0160.803] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\299__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.804] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.804] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0160.804] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.804] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.871] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0160.872] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0160.873] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0160.897] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0160.907] CloseHandle (hObject=0x1fc) returned 1 [0160.908] CloseHandle (hObject=0x204) returned 1 [0160.909] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\299__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0160.909] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0160.909] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="299__C~1.PRO")) returned 0x7d29d8 [0160.910] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="299__C~1.PRO")) returned 0 [0160.910] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0160.910] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\299__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0160.911] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\299__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0160.911] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="29__CO~1.PRO")) returned 1 [0160.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\29__connections_cellular_tele.ring (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0160.911] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0160.912] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34c [0160.912] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0160.912] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0160.977] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34c, lpOverlapped=0x0) returned 1 [0160.981] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0160.982] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.004] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.014] CloseHandle (hObject=0x204) returned 1 [0161.015] CloseHandle (hObject=0x1fc) returned 1 [0161.016] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\29__connections_cellular_tele.ring (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0161.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0161.016] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="29__CO~1.PRO")) returned 0x7d2c18 [0161.017] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="29__CO~1.PRO")) returned 0 [0161.017] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0161.017] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\29__connections_cellular_tele.ring (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0161.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\29__connections_cellular_tele.ring (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0161.018] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="2__CON~1.PRO")) returned 1 [0161.019] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\2__connections_cellular_djezzy (algeria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.019] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.020] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0161.020] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.020] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0161.199] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0161.200] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0161.202] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.223] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.234] CloseHandle (hObject=0x1fc) returned 1 [0161.234] CloseHandle (hObject=0x204) returned 1 [0161.235] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\2__connections_cellular_djezzy (algeria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0161.236] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0161.236] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="2__CON~1.PRO")) returned 0x7d3018 [0161.236] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="2__CON~1.PRO")) returned 0 [0161.236] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0161.236] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\2__connections_cellular_djezzy (algeria)_i0$(__mvid)@wap.provxml")) returned 1 [0161.239] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\2__connections_cellular_djezzy (algeria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0161.239] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="300__C~1.PRO")) returned 1 [0161.239] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\300__connections_cellular_2degrees (new zealand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.239] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.240] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0161.240] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.240] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0161.309] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0161.310] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0161.311] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.343] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.354] CloseHandle (hObject=0x204) returned 1 [0161.354] CloseHandle (hObject=0x1fc) returned 1 [0161.355] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\300__connections_cellular_2degrees (new zealand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0161.356] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0161.356] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="300__C~1.PRO")) returned 0x7d3018 [0161.356] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="300__C~1.PRO")) returned 0 [0161.356] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0161.356] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\300__connections_cellular_2degrees (new zealand)_i0$(__mvid)@wap.provxml")) returned 1 [0161.357] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\300__connections_cellular_2degrees (new zealand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0161.357] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="301__C~1.PRO")) returned 1 [0161.360] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\301__connections_cellular_telecom new zealand (new zealand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.361] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.361] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2de [0161.361] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.361] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0161.468] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2de, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2de, lpOverlapped=0x0) returned 1 [0161.469] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0161.470] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.494] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.506] CloseHandle (hObject=0x1fc) returned 1 [0161.506] CloseHandle (hObject=0x204) returned 1 [0161.507] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\301__connections_cellular_telecom new zealand (new zealand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0161.508] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0161.508] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="301__C~1.PRO")) returned 0x7d2c98 [0161.508] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="301__C~1.PRO")) returned 0 [0161.508] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0161.508] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\301__connections_cellular_telecom new zealand (new zealand)_i0$(__mvid)@wap.provxml")) returned 1 [0161.509] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\301__connections_cellular_telecom new zealand (new zealand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0161.509] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml", cAlternateFileName="302__C~1.PRO")) returned 1 [0161.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\302__connections_cellular_telecom new zealand (new zealand)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.510] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x326 [0161.510] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.511] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0161.600] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x326, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x326, lpOverlapped=0x0) returned 1 [0161.604] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0161.605] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.678] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.688] CloseHandle (hObject=0x204) returned 1 [0161.689] CloseHandle (hObject=0x1fc) returned 1 [0161.690] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\302__connections_cellular_telecom new zealand (new zealand)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0161.691] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0161.691] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml", cAlternateFileName="302__C~1.PRO")) returned 0x7d2b58 [0161.691] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml", cAlternateFileName="302__C~1.PRO")) returned 0 [0161.691] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0161.691] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\302__connections_cellular_telecom new zealand (new zealand)_i1$(__mvid)@wap.provxml")) returned 1 [0161.693] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\302__connections_cellular_telecom new zealand (new zealand)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0161.693] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="303__C~1.PRO")) returned 1 [0161.693] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\303__connections_cellular_vodafone nz (new zealand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.693] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.694] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x30b [0161.694] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.694] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0161.759] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x30b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x30b, lpOverlapped=0x0) returned 1 [0161.761] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0161.762] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.785] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.796] CloseHandle (hObject=0x1fc) returned 1 [0161.796] CloseHandle (hObject=0x204) returned 1 [0161.797] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\303__connections_cellular_vodafone nz (new zealand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0161.798] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0161.798] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="303__C~1.PRO")) returned 0x7d2ad8 [0161.798] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="303__C~1.PRO")) returned 0 [0161.798] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0161.798] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\303__connections_cellular_vodafone nz (new zealand)_i0$(__mvid)@wap.provxml")) returned 1 [0161.799] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\303__connections_cellular_vodafone nz (new zealand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0161.799] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="304__C~1.PRO")) returned 1 [0161.799] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\304__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.799] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.800] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0161.800] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.800] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0161.868] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0161.869] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0161.870] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0161.893] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.904] CloseHandle (hObject=0x204) returned 1 [0161.904] CloseHandle (hObject=0x1fc) returned 1 [0161.905] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\304__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0161.906] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0161.906] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="304__C~1.PRO")) returned 0x7d3018 [0161.906] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="304__C~1.PRO")) returned 0 [0161.906] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0161.906] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\304__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0161.907] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\304__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0161.907] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="305__C~1.PRO")) returned 1 [0161.908] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\305__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0161.908] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0161.913] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fd [0161.913] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0161.913] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.004] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2fd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2fd, lpOverlapped=0x0) returned 1 [0162.006] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0162.008] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.030] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.044] CloseHandle (hObject=0x1fc) returned 1 [0162.044] CloseHandle (hObject=0x204) returned 1 [0162.046] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\305__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0162.046] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0162.047] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="305__C~1.PRO")) returned 0x7d2a58 [0162.047] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="305__C~1.PRO")) returned 0 [0162.047] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0162.047] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\305__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml")) returned 1 [0162.048] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\305__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.048] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml", cAlternateFileName="306__C~1.PRO")) returned 1 [0162.048] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\306__connections_cellular_claro (nicaragua)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.049] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.049] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x311 [0162.049] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.049] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.109] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x311, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x311, lpOverlapped=0x0) returned 1 [0162.111] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0162.112] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.136] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.147] CloseHandle (hObject=0x204) returned 1 [0162.147] CloseHandle (hObject=0x1fc) returned 1 [0162.149] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\306__connections_cellular_claro (nicaragua)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0162.149] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0162.149] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml", cAlternateFileName="306__C~1.PRO")) returned 0x7d2918 [0162.149] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml", cAlternateFileName="306__C~1.PRO")) returned 0 [0162.149] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0162.150] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\306__connections_cellular_claro (nicaragua)_i1$(__mvid)@wap.provxml")) returned 1 [0162.151] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\306__connections_cellular_claro (nicaragua)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0162.151] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="307__C~1.PRO")) returned 1 [0162.151] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\307__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.151] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.152] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x307 [0162.152] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.152] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.217] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x307, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x307, lpOverlapped=0x0) returned 1 [0162.220] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0162.221] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.244] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.256] CloseHandle (hObject=0x1fc) returned 1 [0162.256] CloseHandle (hObject=0x204) returned 1 [0162.258] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\307__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0162.258] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0162.258] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="307__C~1.PRO")) returned 0x7d2c18 [0162.259] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="307__C~1.PRO")) returned 0 [0162.259] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0162.259] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\307__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml")) returned 1 [0162.260] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\307__connections_cellular_claro (nicaragua)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.260] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="308__C~1.PRO")) returned 1 [0162.260] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\308__connections_cellular_telefonica (nicaragua)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.260] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.261] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x322 [0162.261] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.261] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.391] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x322, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x322, lpOverlapped=0x0) returned 1 [0162.393] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0162.394] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.416] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.429] CloseHandle (hObject=0x204) returned 1 [0162.429] CloseHandle (hObject=0x1fc) returned 1 [0162.429] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\308__connections_cellular_telefonica (nicaragua)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0162.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0162.430] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="308__C~1.PRO")) returned 0x7d2c98 [0162.430] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="308__C~1.PRO")) returned 0 [0162.430] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0162.430] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\308__connections_cellular_telefonica (nicaragua)_i0$(__mvid)@wap.provxml")) returned 1 [0162.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\308__connections_cellular_telefonica (nicaragua)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.431] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="309__C~1.PRO")) returned 1 [0162.431] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\309__connections_cellular_mtn (nigeria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.431] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.432] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0162.432] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.432] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.499] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0162.500] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0162.501] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.564] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.575] CloseHandle (hObject=0x1fc) returned 1 [0162.575] CloseHandle (hObject=0x204) returned 1 [0162.575] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\309__connections_cellular_mtn (nigeria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0162.576] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0162.576] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="309__C~1.PRO")) returned 0x7d3018 [0162.576] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="309__C~1.PRO")) returned 0 [0162.576] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0162.576] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\309__connections_cellular_mtn (nigeria)_i0$(__mvid)@wap.provxml")) returned 1 [0162.577] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\309__connections_cellular_mtn (nigeria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.577] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="30__CO~1.PRO")) returned 1 [0162.577] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\30__connections_cellular_t-mobile austria (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.578] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.578] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35b [0162.578] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.578] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.706] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35b, lpOverlapped=0x0) returned 1 [0162.709] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0162.710] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.732] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.743] CloseHandle (hObject=0x204) returned 1 [0162.743] CloseHandle (hObject=0x1fc) returned 1 [0162.743] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\30__connections_cellular_t-mobile austria (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0162.744] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0162.744] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="30__CO~1.PRO")) returned 0x7d29d8 [0162.744] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="30__CO~1.PRO")) returned 0 [0162.744] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0162.744] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\30__connections_cellular_t-mobile austria (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0162.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\30__connections_cellular_t-mobile austria (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.745] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="310__C~1.PRO")) returned 1 [0162.746] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\310__connections_cellular_netcom (norway)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.756] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.756] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28b [0162.756] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.757] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.822] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28b, lpOverlapped=0x0) returned 1 [0162.824] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0162.825] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.849] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.860] CloseHandle (hObject=0x1fc) returned 1 [0162.860] CloseHandle (hObject=0x204) returned 1 [0162.860] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\310__connections_cellular_netcom (norway)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0162.861] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0162.861] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="310__C~1.PRO")) returned 0x7d3018 [0162.861] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="310__C~1.PRO")) returned 0 [0162.861] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0162.861] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\310__connections_cellular_netcom (norway)_i0$(__mvid)@wap.provxml")) returned 1 [0162.862] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\310__connections_cellular_netcom (norway)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.863] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="311__C~1.PRO")) returned 1 [0162.863] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\311__connections_cellular_tdc norway (norway)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.863] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.863] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0162.863] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.864] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0162.929] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0162.931] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0162.932] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0162.954] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0162.965] CloseHandle (hObject=0x204) returned 1 [0162.965] CloseHandle (hObject=0x1fc) returned 1 [0162.966] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\311__connections_cellular_tdc norway (norway)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0162.966] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0162.966] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="311__C~1.PRO")) returned 0x7d2d58 [0162.967] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="311__C~1.PRO")) returned 0 [0162.967] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0162.967] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\311__connections_cellular_tdc norway (norway)_i0$(__mvid)@wap.provxml")) returned 1 [0162.968] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\311__connections_cellular_tdc norway (norway)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0162.968] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="312__C~1.PRO")) returned 1 [0162.968] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\312__connections_cellular_telenor (norway)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0162.968] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0162.969] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0162.969] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0162.969] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.050] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0163.052] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0163.053] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.076] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.087] CloseHandle (hObject=0x1fc) returned 1 [0163.087] CloseHandle (hObject=0x204) returned 1 [0163.087] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\312__connections_cellular_telenor (norway)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0163.088] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0163.088] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="312__C~1.PRO")) returned 0x7d3098 [0163.088] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="312__C~1.PRO")) returned 0 [0163.088] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0163.088] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\312__connections_cellular_telenor (norway)_i0$(__mvid)@wap.provxml")) returned 1 [0163.089] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\312__connections_cellular_telenor (norway)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.089] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml", cAlternateFileName="313__C~1.PRO")) returned 1 [0163.089] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\313__connections_cellular_omani qatari telecommunications company saoc (oman)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.090] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.090] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ed [0163.090] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.090] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.154] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ed, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ed, lpOverlapped=0x0) returned 1 [0163.156] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0163.157] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.179] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.190] CloseHandle (hObject=0x204) returned 1 [0163.190] CloseHandle (hObject=0x1fc) returned 1 [0163.190] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\313__connections_cellular_omani qatari telecommunications company saoc (oman)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0163.191] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0163.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml", cAlternateFileName="313__C~1.PRO")) returned 0x7d2a58 [0163.191] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml", cAlternateFileName="313__C~1.PRO")) returned 0 [0163.191] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0163.191] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\313__connections_cellular_omani qatari telecommunications company saoc (oman)_i0$(__mvid)@wap.provxml")) returned 1 [0163.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\313__connections_cellular_omani qatari telecommunications company saoc (oman)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.193] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="314__C~1.PRO")) returned 1 [0163.193] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\314__connections_cellular_mobilink gsm (pakistan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.193] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.194] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29a [0163.194] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.194] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.293] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29a, lpOverlapped=0x0) returned 1 [0163.294] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0163.295] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.317] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.328] CloseHandle (hObject=0x1fc) returned 1 [0163.328] CloseHandle (hObject=0x204) returned 1 [0163.328] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\314__connections_cellular_mobilink gsm (pakistan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0163.329] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0163.329] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="314__C~1.PRO")) returned 0x7d2998 [0163.329] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="314__C~1.PRO")) returned 0 [0163.329] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0163.329] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\314__connections_cellular_mobilink gsm (pakistan)_i0$(__mvid)@wap.provxml")) returned 1 [0163.330] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\314__connections_cellular_mobilink gsm (pakistan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.330] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="315__C~1.PRO")) returned 1 [0163.331] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\315__connections_cellular_mobilink gsm (pakistan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.331] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.331] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28f [0163.331] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.332] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.427] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28f, lpOverlapped=0x0) returned 1 [0163.429] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0163.430] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.453] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.464] CloseHandle (hObject=0x204) returned 1 [0163.464] CloseHandle (hObject=0x1fc) returned 1 [0163.464] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\315__connections_cellular_mobilink gsm (pakistan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0163.465] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0163.465] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="315__C~1.PRO")) returned 0x7d2c98 [0163.465] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="315__C~1.PRO")) returned 0 [0163.465] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0163.465] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\315__connections_cellular_mobilink gsm (pakistan)_i1$(__mvid)@wap.provxml")) returned 1 [0163.466] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\315__connections_cellular_mobilink gsm (pakistan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0163.466] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="316__C~1.PRO")) returned 1 [0163.467] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\316__connections_cellular_telenor (pakistan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.467] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.467] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x346 [0163.467] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.468] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.538] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x346, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x346, lpOverlapped=0x0) returned 1 [0163.539] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0163.540] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.563] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.575] CloseHandle (hObject=0x1fc) returned 1 [0163.575] CloseHandle (hObject=0x204) returned 1 [0163.575] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\316__connections_cellular_telenor (pakistan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0163.576] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0163.576] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="316__C~1.PRO")) returned 0x7d2998 [0163.576] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="316__C~1.PRO")) returned 0 [0163.576] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0163.576] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\316__connections_cellular_telenor (pakistan)_i0$(__mvid)@wap.provxml")) returned 1 [0163.577] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\316__connections_cellular_telenor (pakistan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.577] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="317__C~1.PRO")) returned 1 [0163.582] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\317__connections_cellular_ufone (pakistan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.582] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.583] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x288 [0163.583] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.583] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.718] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x288, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x288, lpOverlapped=0x0) returned 1 [0163.720] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0163.721] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.745] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.755] CloseHandle (hObject=0x204) returned 1 [0163.756] CloseHandle (hObject=0x1fc) returned 1 [0163.756] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\317__connections_cellular_ufone (pakistan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0163.757] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0163.757] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="317__C~1.PRO")) returned 0x7d3018 [0163.757] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="317__C~1.PRO")) returned 0 [0163.757] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0163.757] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\317__connections_cellular_ufone (pakistan)_i0$(__mvid)@wap.provxml")) returned 1 [0163.758] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\317__connections_cellular_ufone (pakistan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.758] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="318__C~1.PRO")) returned 1 [0163.758] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\318__connections_cellular_warid telecom (pakistan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.759] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.759] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0163.759] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.760] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.826] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0163.827] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0163.828] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.850] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.861] CloseHandle (hObject=0x1fc) returned 1 [0163.861] CloseHandle (hObject=0x204) returned 1 [0163.861] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\318__connections_cellular_warid telecom (pakistan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0163.862] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0163.862] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="318__C~1.PRO")) returned 0x7d3018 [0163.862] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="318__C~1.PRO")) returned 0 [0163.862] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0163.863] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\318__connections_cellular_warid telecom (pakistan)_i0$(__mvid)@wap.provxml")) returned 1 [0163.864] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\318__connections_cellular_warid telecom (pakistan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.864] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml", cAlternateFileName="319__C~1.PRO")) returned 1 [0163.866] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\319__connections_cellular_aljawwal (palestinian authority)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.866] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.867] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f2 [0163.867] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.867] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0163.932] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f2, lpOverlapped=0x0) returned 1 [0163.933] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0163.934] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0163.956] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0163.971] CloseHandle (hObject=0x204) returned 1 [0163.971] CloseHandle (hObject=0x1fc) returned 1 [0163.972] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\319__connections_cellular_aljawwal (palestinian authority)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0163.972] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0163.972] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml", cAlternateFileName="319__C~1.PRO")) returned 0x7d3018 [0163.973] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml", cAlternateFileName="319__C~1.PRO")) returned 0 [0163.973] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0163.973] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\319__connections_cellular_aljawwal (palestinian authority)_i0$(__mvid)@wap.provxml")) returned 1 [0163.974] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\319__connections_cellular_aljawwal (palestinian authority)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0163.974] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="31__CO~1.PRO")) returned 1 [0163.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\31__connections_cellular_t-mobile m2m (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0163.975] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0163.975] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x363 [0163.975] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0163.975] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0164.076] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x363, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x363, lpOverlapped=0x0) returned 1 [0164.080] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0164.081] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0164.103] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0164.147] CloseHandle (hObject=0x1fc) returned 1 [0164.147] CloseHandle (hObject=0x204) returned 1 [0164.147] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\31__connections_cellular_t-mobile m2m (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0164.148] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0164.148] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="31__CO~1.PRO")) returned 0x7d3018 [0164.148] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="31__CO~1.PRO")) returned 0 [0164.148] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0164.148] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\31__connections_cellular_t-mobile m2m (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0164.149] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\31__connections_cellular_t-mobile m2m (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0164.149] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="320__C~1.PRO")) returned 1 [0164.149] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\320__connections_cellular_cable and wireless (panama)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0164.150] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0164.150] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d8 [0164.150] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0164.151] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0164.216] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d8, lpOverlapped=0x0) returned 1 [0164.217] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0164.218] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0164.242] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0164.252] CloseHandle (hObject=0x204) returned 1 [0164.253] CloseHandle (hObject=0x1fc) returned 1 [0164.253] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\320__connections_cellular_cable and wireless (panama)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0164.254] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0164.254] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="320__C~1.PRO")) returned 0x7d2918 [0164.254] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="320__C~1.PRO")) returned 0 [0164.254] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0164.254] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\320__connections_cellular_cable and wireless (panama)_i0$(__mvid)@wap.provxml")) returned 1 [0164.255] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\320__connections_cellular_cable and wireless (panama)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0164.255] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="321__C~1.PRO")) returned 1 [0164.255] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\321__connections_cellular_claro (panama)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0164.256] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0164.257] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc [0164.257] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0164.257] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0164.322] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bc, lpOverlapped=0x0) returned 1 [0164.325] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0164.326] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0164.348] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0164.359] CloseHandle (hObject=0x1fc) returned 1 [0164.359] CloseHandle (hObject=0x204) returned 1 [0164.359] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\321__connections_cellular_claro (panama)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0164.360] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0164.360] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="321__C~1.PRO")) returned 0x7d2d58 [0164.360] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="321__C~1.PRO")) returned 0 [0164.360] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0164.360] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\321__connections_cellular_claro (panama)_i0$(__mvid)@wap.provxml")) returned 1 [0164.361] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\321__connections_cellular_claro (panama)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0164.361] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="322__C~1.PRO")) returned 1 [0164.362] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\322__connections_cellular_telefonica (panama)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0164.362] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0164.362] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0164.362] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0164.363] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0164.448] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0164.450] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0164.451] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0164.473] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0164.484] CloseHandle (hObject=0x204) returned 1 [0164.484] CloseHandle (hObject=0x1fc) returned 1 [0164.484] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\322__connections_cellular_telefonica (panama)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0164.485] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0164.485] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="322__C~1.PRO")) returned 0x7d2ad8 [0164.485] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="322__C~1.PRO")) returned 0 [0164.485] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0164.486] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\322__connections_cellular_telefonica (panama)_i0$(__mvid)@wap.provxml")) returned 1 [0164.486] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\322__connections_cellular_telefonica (panama)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0164.487] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="323__C~1.PRO")) returned 1 [0164.487] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\323__connections_cellular_claro (paraguay)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0164.487] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0164.487] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0164.487] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0164.488] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0164.565] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0164.566] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0164.567] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0164.697] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0164.725] CloseHandle (hObject=0x1fc) returned 1 [0164.725] CloseHandle (hObject=0x204) returned 1 [0164.725] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\323__connections_cellular_claro (paraguay)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0164.726] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0164.726] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="323__C~1.PRO")) returned 0x7d2998 [0164.726] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="323__C~1.PRO")) returned 0 [0164.726] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0164.727] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\323__connections_cellular_claro (paraguay)_i0$(__mvid)@wap.provxml")) returned 1 [0164.727] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\323__Connections_Cellular_Claro (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\323__connections_cellular_claro (paraguay)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0164.728] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="324__C~1.PRO")) returned 1 [0164.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\324__connections_cellular_telecel (paraguay)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0164.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0164.729] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0164.729] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0164.729] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0164.902] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0164.904] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0164.905] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0164.928] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0164.939] CloseHandle (hObject=0x204) returned 1 [0164.939] CloseHandle (hObject=0x1fc) returned 1 [0164.939] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\324__connections_cellular_telecel (paraguay)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0164.940] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0164.940] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="324__C~1.PRO")) returned 0x7d2b58 [0164.940] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="324__C~1.PRO")) returned 0 [0164.940] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0164.940] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\324__connections_cellular_telecel (paraguay)_i0$(__mvid)@wap.provxml")) returned 1 [0164.941] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\324__Connections_Cellular_Telecel (Paraguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\324__connections_cellular_telecel (paraguay)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0164.941] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml", cAlternateFileName="325__C~1.PRO")) returned 1 [0164.942] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\325__connections_cellular_claro (peru)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0164.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0164.971] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ba [0164.972] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0164.972] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0165.075] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ba, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ba, lpOverlapped=0x0) returned 1 [0165.093] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0165.094] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0165.117] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0165.128] CloseHandle (hObject=0x1fc) returned 1 [0165.128] CloseHandle (hObject=0x204) returned 1 [0165.128] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\325__connections_cellular_claro (peru)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0165.128] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0165.129] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml", cAlternateFileName="325__C~1.PRO")) returned 0x7d2998 [0165.129] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml", cAlternateFileName="325__C~1.PRO")) returned 0 [0165.129] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0165.129] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\325__connections_cellular_claro (peru)_i0$(__mvid)@wap.provxml")) returned 1 [0165.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\325__Connections_Cellular_Claro (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\325__connections_cellular_claro (peru)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0165.142] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml", cAlternateFileName="326__C~1.PRO")) returned 1 [0165.142] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\326__connections_cellular_telefonica (peru)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0165.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0165.143] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0165.143] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0165.143] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0165.239] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0165.242] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0165.243] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0165.266] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0165.277] CloseHandle (hObject=0x204) returned 1 [0165.277] CloseHandle (hObject=0x1fc) returned 1 [0165.277] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\326__connections_cellular_telefonica (peru)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0165.278] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0165.278] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml", cAlternateFileName="326__C~1.PRO")) returned 0x7d2c98 [0165.278] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml", cAlternateFileName="326__C~1.PRO")) returned 0 [0165.278] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0165.279] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\326__connections_cellular_telefonica (peru)_i0$(__mvid)@wap.provxml")) returned 1 [0165.280] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\326__Connections_Cellular_Telefonica (Peru)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\326__connections_cellular_telefonica (peru)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0165.280] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x0, cFileName="327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="327__C~1.PRO")) returned 1 [0165.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\327__connections_cellular_globe (philippines)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0165.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0165.281] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x292 [0165.281] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0165.281] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0165.359] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x292, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x292, lpOverlapped=0x0) returned 1 [0165.360] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0165.361] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0165.408] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0165.419] CloseHandle (hObject=0x1fc) returned 1 [0165.419] CloseHandle (hObject=0x204) returned 1 [0165.419] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\327__connections_cellular_globe (philippines)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0165.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0165.420] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="327__C~1.PRO")) returned 0x7d2b58 [0165.420] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="327__C~1.PRO")) returned 0 [0165.420] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0165.420] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\327__connections_cellular_globe (philippines)_i0$(__mvid)@wap.provxml")) returned 1 [0165.421] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\327__Connections_Cellular_Globe (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\327__connections_cellular_globe (philippines)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0165.421] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml", cAlternateFileName="328__C~1.PRO")) returned 1 [0165.422] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\328__connections_cellular_globe (philippines)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0165.422] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0165.422] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0165.422] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0165.423] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0165.569] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28e, lpOverlapped=0x0) returned 1 [0165.570] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0165.571] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0165.593] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0165.669] CloseHandle (hObject=0x204) returned 1 [0165.669] CloseHandle (hObject=0x1fc) returned 1 [0165.669] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\328__connections_cellular_globe (philippines)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0165.670] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0165.670] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml", cAlternateFileName="328__C~1.PRO")) returned 0x7d2a58 [0165.670] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c1dec7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c1dec7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c1dec7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml", cAlternateFileName="328__C~1.PRO")) returned 0 [0165.670] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0165.670] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\328__connections_cellular_globe (philippines)_i1$(__mvid)@wap.provxml")) returned 1 [0165.671] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\328__Connections_Cellular_Globe (Philippines)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\328__connections_cellular_globe (philippines)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0165.671] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="329__C~1.PRO")) returned 1 [0165.671] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\329__connections_cellular_smart (philippines)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0165.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0165.672] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0165.672] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0165.672] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0165.774] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0165.776] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0165.777] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0165.840] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0165.851] CloseHandle (hObject=0x1fc) returned 1 [0165.851] CloseHandle (hObject=0x204) returned 1 [0165.851] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\329__connections_cellular_smart (philippines)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0165.852] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0165.852] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="329__C~1.PRO")) returned 0x7d3018 [0165.852] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="329__C~1.PRO")) returned 0 [0165.852] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0165.852] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\329__connections_cellular_smart (philippines)_i0$(__mvid)@wap.provxml")) returned 1 [0165.853] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\329__Connections_Cellular_Smart (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\329__connections_cellular_smart (philippines)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0165.853] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="32__CO~1.PRO")) returned 1 [0165.853] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\32__connections_cellular_azercell (azerbaijan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0165.854] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0165.854] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0165.854] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0165.855] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0166.079] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0166.080] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0166.081] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0166.105] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0166.115] CloseHandle (hObject=0x204) returned 1 [0166.116] CloseHandle (hObject=0x1fc) returned 1 [0166.116] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\32__connections_cellular_azercell (azerbaijan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0166.116] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0166.117] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="32__CO~1.PRO")) returned 0x7d2b18 [0166.117] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="32__CO~1.PRO")) returned 0 [0166.117] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0166.117] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\32__connections_cellular_azercell (azerbaijan)_i0$(__mvid)@wap.provxml")) returned 1 [0166.118] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\32__Connections_Cellular_Azercell (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\32__connections_cellular_azercell (azerbaijan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0166.118] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="330__C~1.PRO")) returned 1 [0166.118] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\330__connections_cellular_sun cellular (philippines)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0166.118] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMwX19D3256ZWN01W96c19DZW4sdW42cl9TdW4gQ2Vs3HVsYXIgKFBo1W4pcHBp3mVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmwx19d3256zwn01w96c19dzw4sdw42cl9tdw4gq2vs3hvsyxigkfbo1w4pchbp3mvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0166.119] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0166.119] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0166.119] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0166.210] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0166.212] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0166.213] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0166.234] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0166.245] CloseHandle (hObject=0x1fc) returned 1 [0166.245] CloseHandle (hObject=0x204) returned 1 [0166.245] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\330__connections_cellular_sun cellular (philippines)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMwX19D3256ZWN01W96c19DZW4sdW42cl9TdW4gQ2Vs3HVsYXIgKFBo1W4pcHBp3mVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmwx19d3256zwn01w96c19dzw4sdw42cl9tdw4gq2vs3hvsyxigkfbo1w4pchbp3mvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0166.246] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMwX19D3256ZWN01W96c19DZW4sdW42cl9TdW4gQ2Vs3HVsYXIgKFBo1W4pcHBp3mVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmwx19d3256zwn01w96c19dzw4sdw42cl9tdw4gq2vs3hvsyxigkfbo1w4pchbp3mvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0166.246] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="330__C~1.PRO")) returned 0x7d3018 [0166.246] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml", cAlternateFileName="330__C~1.PRO")) returned 0 [0166.246] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0166.246] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\330__connections_cellular_sun cellular (philippines)_i0$(__mvid)@wap.provxml")) returned 1 [0166.247] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\330__Connections_Cellular_Sun Cellular (Philippines)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\330__connections_cellular_sun cellular (philippines)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0166.247] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="331__C~1.PRO")) returned 1 [0166.247] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\331__connections_cellular_orange (poland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0166.248] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0166.248] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34d [0166.248] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0166.248] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0166.346] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34d, lpOverlapped=0x0) returned 1 [0166.347] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0166.348] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0166.351] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0166.352] CloseHandle (hObject=0x204) returned 1 [0166.352] CloseHandle (hObject=0x1fc) returned 1 [0166.353] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\331__connections_cellular_orange (poland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0166.353] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0166.353] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="331__C~1.PRO")) returned 0x7d3018 [0166.353] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c44137, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="331__C~1.PRO")) returned 0 [0166.354] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0166.354] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\331__connections_cellular_orange (poland)_i0$(__mvid)@wap.provxml")) returned 1 [0166.355] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\331__Connections_Cellular_Orange (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\331__connections_cellular_orange (poland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0166.355] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="332__C~1.PRO")) returned 1 [0166.356] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\332__connections_cellular_play (poland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0166.357] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMyX19D3256ZWN01W96c19DZW4sdW42cl9QTEFZIC2Q32423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmyx19d3256zwn01w96c19dzw4sdw42cl9qtefzic2q32423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0166.358] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x349 [0166.358] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0166.358] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0166.567] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x349, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x349, lpOverlapped=0x0) returned 1 [0166.568] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0166.569] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0166.591] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0166.602] CloseHandle (hObject=0x1fc) returned 1 [0166.602] CloseHandle (hObject=0x204) returned 1 [0166.602] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\332__connections_cellular_play (poland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMyX19D3256ZWN01W96c19DZW4sdW42cl9QTEFZIC2Q32423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmyx19d3256zwn01w96c19dzw4sdw42cl9qtefzic2q32423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0166.603] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMyX19D3256ZWN01W96c19DZW4sdW42cl9QTEFZIC2Q32423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmyx19d3256zwn01w96c19dzw4sdw42cl9qtefzic2q32423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0166.669] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="332__C~1.PRO")) returned 0x7d3018 [0166.669] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c44137, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c44137, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="332__C~1.PRO")) returned 0 [0166.669] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0166.669] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\332__connections_cellular_play (poland)_i0$(__mvid)@wap.provxml")) returned 1 [0166.670] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\332__Connections_Cellular_PLAY (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\332__connections_cellular_play (poland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0166.670] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="333__C~1.PRO")) returned 1 [0166.670] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\333__connections_cellular_pl-plus (poland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0166.671] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMzX19D3256ZWN01W96c19DZW4sdW42cl9QTC1QTFVTIC2Q32423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmzx19d3256zwn01w96c19dzw4sdw42cl9qtc1qtfvtic2q32423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0166.671] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34c [0166.671] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0166.671] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0166.772] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34c, lpOverlapped=0x0) returned 1 [0166.773] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0166.774] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0166.835] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0166.846] CloseHandle (hObject=0x204) returned 1 [0166.846] CloseHandle (hObject=0x1fc) returned 1 [0166.846] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\333__connections_cellular_pl-plus (poland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMzX19D3256ZWN01W96c19DZW4sdW42cl9QTC1QTFVTIC2Q32423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmzx19d3256zwn01w96c19dzw4sdw42cl9qtc1qtfvtic2q32423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0166.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzMzX19D3256ZWN01W96c19DZW4sdW42cl9QTC1QTFVTIC2Q32423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzmzx19d3256zwn01w96c19dzw4sdw42cl9qtc1qtfvtic2q32423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0166.847] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="333__C~1.PRO")) returned 0x7d3018 [0166.847] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="333__C~1.PRO")) returned 0 [0166.847] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0166.848] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\333__connections_cellular_pl-plus (poland)_i0$(__mvid)@wap.provxml")) returned 1 [0166.848] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\333__Connections_Cellular_PL-PLUS (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\333__connections_cellular_pl-plus (poland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0166.849] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="334__C~1.PRO")) returned 1 [0166.849] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\334__connections_cellular_t-mobile poland (poland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0166.849] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0166.849] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0166.850] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0166.850] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0166.957] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0166.994] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0166.995] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0167.017] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0167.028] CloseHandle (hObject=0x1fc) returned 1 [0167.029] CloseHandle (hObject=0x204) returned 1 [0167.029] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\334__connections_cellular_t-mobile poland (poland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0167.030] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0167.030] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="334__C~1.PRO")) returned 0x7d3018 [0167.030] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="334__C~1.PRO")) returned 0 [0167.030] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0167.030] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\334__connections_cellular_t-mobile poland (poland)_i0$(__mvid)@wap.provxml")) returned 1 [0167.031] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\334__Connections_Cellular_T-Mobile Poland (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\334__connections_cellular_t-mobile poland (poland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0167.031] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="335__C~1.PRO")) returned 1 [0167.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\335__connections_cellular_optimus (portugal)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0167.032] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0167.032] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0167.032] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0167.032] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0167.242] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0167.244] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0167.245] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0167.312] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0167.323] CloseHandle (hObject=0x204) returned 1 [0167.323] CloseHandle (hObject=0x1fc) returned 1 [0167.323] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\335__connections_cellular_optimus (portugal)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0167.324] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0167.324] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="335__C~1.PRO")) returned 0x7d2918 [0167.324] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c6a39e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c6a39e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c6a39e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="335__C~1.PRO")) returned 0 [0167.324] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0167.324] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\335__connections_cellular_optimus (portugal)_i0$(__mvid)@wap.provxml")) returned 1 [0167.325] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\335__Connections_Cellular_Optimus (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\335__connections_cellular_optimus (portugal)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0167.325] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="336__C~1.PRO")) returned 1 [0167.325] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\336__connections_cellular_tmn (portugal)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0167.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0167.326] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0167.326] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0167.326] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0167.444] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0167.493] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0167.494] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0167.519] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0167.570] CloseHandle (hObject=0x1fc) returned 1 [0167.570] CloseHandle (hObject=0x204) returned 1 [0167.571] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\336__connections_cellular_tmn (portugal)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0167.571] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0167.571] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="336__C~1.PRO")) returned 0x7d2998 [0167.572] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="336__C~1.PRO")) returned 0 [0167.572] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0167.572] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\336__connections_cellular_tmn (portugal)_i0$(__mvid)@wap.provxml")) returned 1 [0167.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\336__Connections_Cellular_TMN (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\336__connections_cellular_tmn (portugal)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0167.573] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="337__C~1.PRO")) returned 1 [0167.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\337__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0167.573] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0167.574] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0167.574] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0167.574] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0167.736] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0167.737] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0167.738] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0167.805] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0167.816] CloseHandle (hObject=0x204) returned 1 [0167.816] CloseHandle (hObject=0x1fc) returned 1 [0167.816] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\337__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0167.817] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0167.817] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="337__C~1.PRO")) returned 0x7d2a18 [0167.817] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="337__C~1.PRO")) returned 0 [0167.817] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0167.817] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\337__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0167.818] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\337__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\337__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0167.818] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="338__C~1.PRO")) returned 1 [0167.818] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\338__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0167.819] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0167.819] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c8 [0167.819] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0167.820] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0167.929] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c8, lpOverlapped=0x0) returned 1 [0167.990] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0167.991] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0168.014] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0168.024] CloseHandle (hObject=0x1fc) returned 1 [0168.025] CloseHandle (hObject=0x204) returned 1 [0168.025] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\338__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0168.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0168.026] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="338__C~1.PRO")) returned 0x7d3018 [0168.026] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="338__C~1.PRO")) returned 0 [0168.026] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0168.026] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\338__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0168.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\338__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\338__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0168.027] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="339__C~1.PRO")) returned 1 [0168.027] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\339__connections_cellular_vodafone p (portugal)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0168.027] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM5X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBQIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm5x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbqic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0168.028] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35a [0168.028] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0168.028] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0168.216] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35a, lpOverlapped=0x0) returned 1 [0168.224] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0168.225] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0168.289] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0168.300] CloseHandle (hObject=0x204) returned 1 [0168.300] CloseHandle (hObject=0x1fc) returned 1 [0168.300] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\339__connections_cellular_vodafone p (portugal)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM5X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBQIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm5x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbqic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0168.301] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM5X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBQIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm5x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbqic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0168.301] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="339__C~1.PRO")) returned 0x7d2ad8 [0168.301] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="339__C~1.PRO")) returned 0 [0168.302] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0168.302] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\339__connections_cellular_vodafone p (portugal)_i0$(__mvid)@wap.provxml")) returned 1 [0168.303] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\339__Connections_Cellular_vodafone P (Portugal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\339__connections_cellular_vodafone p (portugal)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0168.303] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="33__CO~1.PRO")) returned 1 [0168.303] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\33__connections_cellular_azerfon (azerbaijan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0168.304] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJm324gKEF6ZXJiYWlqYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mznfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjm324gkef6zxjiywlqyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0168.304] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0168.304] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0168.304] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0168.426] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0168.427] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0168.428] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0168.462] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0168.473] CloseHandle (hObject=0x1fc) returned 1 [0168.473] CloseHandle (hObject=0x204) returned 1 [0168.474] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\33__connections_cellular_azerfon (azerbaijan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJm324gKEF6ZXJiYWlqYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mznfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjm324gkef6zxjiywlqyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0168.474] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJm324gKEF6ZXJiYWlqYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mznfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjm324gkef6zxjiywlqyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0168.474] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="33__CO~1.PRO")) returned 0x7d3018 [0168.474] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="33__CO~1.PRO")) returned 0 [0168.475] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0168.475] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\33__connections_cellular_azerfon (azerbaijan)_i0$(__mvid)@wap.provxml")) returned 1 [0168.476] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\33__Connections_Cellular_Azerfon (Azerbaijan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\33__connections_cellular_azerfon (azerbaijan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0168.476] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="340__C~1.PRO")) returned 1 [0168.476] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\340__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0168.476] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0168.477] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0168.477] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0168.477] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0168.577] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0168.578] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0168.579] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0168.603] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0168.717] CloseHandle (hObject=0x204) returned 1 [0168.717] CloseHandle (hObject=0x1fc) returned 1 [0168.717] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\340__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0168.718] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0168.718] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="340__C~1.PRO")) returned 0x7d3018 [0168.718] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="340__C~1.PRO")) returned 0 [0168.718] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0168.718] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\340__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0168.719] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\340__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\340__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0168.719] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="341__C~1.PRO")) returned 1 [0168.719] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\341__connections_cellular_claro (puerto rico)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0168.720] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUHVlcnRvIFJpY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaouhvlcnrvifjpy28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0168.720] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x283 [0168.720] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0168.720] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0168.796] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x283, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x283, lpOverlapped=0x0) returned 1 [0168.810] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0168.811] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0168.834] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0168.845] CloseHandle (hObject=0x1fc) returned 1 [0168.845] CloseHandle (hObject=0x204) returned 1 [0168.845] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\341__connections_cellular_claro (puerto rico)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUHVlcnRvIFJpY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaouhvlcnrvifjpy28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0168.846] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUHVlcnRvIFJpY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaouhvlcnrvifjpy28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0168.846] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="341__C~1.PRO")) returned 0x7d2918 [0168.846] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="341__C~1.PRO")) returned 0 [0168.846] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0168.846] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\341__connections_cellular_claro (puerto rico)_i0$(__mvid)@wap.provxml")) returned 1 [0168.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\341__Connections_Cellular_Claro (Puerto Rico)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\341__connections_cellular_claro (puerto rico)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0168.847] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml", cAlternateFileName="342__C~1.PRO")) returned 1 [0168.893] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\342__connections_cellular_claro (puerto rico)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0168.893] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUHVlcnRvIFJpY28pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqyx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaouhvlcnrvifjpy28px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0168.894] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0168.894] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0168.895] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0168.989] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0168.990] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0168.991] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.014] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.037] CloseHandle (hObject=0x204) returned 1 [0169.037] CloseHandle (hObject=0x1fc) returned 1 [0169.037] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\342__connections_cellular_claro (puerto rico)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUHVlcnRvIFJpY28pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqyx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaouhvlcnrvifjpy28px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0169.038] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUHVlcnRvIFJpY28pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqyx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaouhvlcnrvifjpy28px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0169.038] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml", cAlternateFileName="342__C~1.PRO")) returned 0x7d2c18 [0169.038] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90c9060a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90c9060a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90c9060a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml", cAlternateFileName="342__C~1.PRO")) returned 0 [0169.038] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0169.038] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\342__connections_cellular_claro (puerto rico)_i1$(__mvid)@wap.provxml")) returned 1 [0169.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\342__Connections_Cellular_Claro (Puerto Rico)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\342__connections_cellular_claro (puerto rico)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0169.039] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="343__C~1.PRO")) returned 1 [0169.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\343__connections_cellular_q-tel (qatar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.040] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQzX19D3256ZWN01W96c19DZW4sdW42cl9RLVRl3CAoUWF0YXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqzx19d3256zwn01w96c19dzw4sdw42cl9rlvrl3caouwf0yxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.040] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27f [0169.040] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.040] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0169.158] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27f, lpOverlapped=0x0) returned 1 [0169.160] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0169.161] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.194] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.205] CloseHandle (hObject=0x1fc) returned 1 [0169.205] CloseHandle (hObject=0x204) returned 1 [0169.205] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\343__connections_cellular_q-tel (qatar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQzX19D3256ZWN01W96c19DZW4sdW42cl9RLVRl3CAoUWF0YXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqzx19d3256zwn01w96c19dzw4sdw42cl9rlvrl3caouwf0yxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0169.206] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQzX19D3256ZWN01W96c19DZW4sdW42cl9RLVRl3CAoUWF0YXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzqzx19d3256zwn01w96c19dzw4sdw42cl9rlvrl3caouwf0yxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0169.206] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="343__C~1.PRO")) returned 0x7d3018 [0169.206] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="343__C~1.PRO")) returned 0 [0169.206] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0169.206] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\343__connections_cellular_q-tel (qatar)_i0$(__mvid)@wap.provxml")) returned 1 [0169.208] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\343__Connections_Cellular_Q-Tel (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\343__connections_cellular_q-tel (qatar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0169.208] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="344__C~1.PRO")) returned 1 [0169.208] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\344__connections_cellular_vodafone qatar (qatar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.208] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBRYXR2ciAoUWF0YXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbryxr2ciaouwf0yxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.209] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dd [0169.209] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.209] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0169.294] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dd, lpOverlapped=0x0) returned 1 [0169.296] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0169.297] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.329] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.339] CloseHandle (hObject=0x204) returned 1 [0169.339] CloseHandle (hObject=0x1fc) returned 1 [0169.340] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\344__connections_cellular_vodafone qatar (qatar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBRYXR2ciAoUWF0YXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbryxr2ciaouwf0yxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0169.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBRYXR2ciAoUWF0YXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbryxr2ciaouwf0yxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0169.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="344__C~1.PRO")) returned 0x7d2a18 [0169.341] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="344__C~1.PRO")) returned 0 [0169.341] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0169.341] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\344__connections_cellular_vodafone qatar (qatar)_i0$(__mvid)@wap.provxml")) returned 1 [0169.342] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\344__Connections_Cellular_Vodafone Qatar (Qatar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\344__connections_cellular_vodafone qatar (qatar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0169.342] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml", cAlternateFileName="345__C~1.PRO")) returned 1 [0169.342] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\345__connections_cellular_vodafone qatar (qatar)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.342] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBRYXR2ciAoUWF0YXIpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbryxr2ciaouwf0yxipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.346] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d5 [0169.346] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.346] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0169.429] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d5, lpOverlapped=0x0) returned 1 [0169.431] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0169.432] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.454] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.476] CloseHandle (hObject=0x1fc) returned 1 [0169.476] CloseHandle (hObject=0x204) returned 1 [0169.476] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\345__connections_cellular_vodafone qatar (qatar)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBRYXR2ciAoUWF0YXIpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbryxr2ciaouwf0yxipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0169.477] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBRYXR2ciAoUWF0YXIpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbryxr2ciaouwf0yxipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0169.477] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml", cAlternateFileName="345__C~1.PRO")) returned 0x7d29d8 [0169.477] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml", cAlternateFileName="345__C~1.PRO")) returned 0 [0169.477] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0169.477] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\345__connections_cellular_vodafone qatar (qatar)_i1$(__mvid)@wap.provxml")) returned 1 [0169.478] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\345__Connections_Cellular_Vodafone Qatar (Qatar)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\345__connections_cellular_vodafone qatar (qatar)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0169.479] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="346__C~1.PRO")) returned 1 [0169.479] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\346__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.479] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.479] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0169.479] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.480] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0169.577] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0169.578] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0169.579] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.591] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.596] CloseHandle (hObject=0x204) returned 1 [0169.596] CloseHandle (hObject=0x1fc) returned 1 [0169.597] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\346__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0169.598] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0169.598] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="346__C~1.PRO")) returned 0x7d2a18 [0169.598] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cb6875, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="346__C~1.PRO")) returned 0 [0169.598] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0169.598] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\346__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0169.599] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\346__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\346__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0169.599] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml", cAlternateFileName="347__C~1.PRO")) returned 1 [0169.599] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\347__connections_cellular_moldcell (republic of moldova)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.600] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ3X19D3256ZWN01W96c19DZW4sdW42cl9N3245Q2Vs3CAoUmVwdWJs1WMg32YgTW9sZG92YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq3x19d3256zwn01w96c19dzw4sdw42cl9n3245q2vs3caoumvwdwjs1wmg32ygtw9szg92yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.600] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0169.600] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.601] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0169.729] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0169.730] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0169.731] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.765] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.789] CloseHandle (hObject=0x1fc) returned 1 [0169.789] CloseHandle (hObject=0x204) returned 1 [0169.789] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\347__connections_cellular_moldcell (republic of moldova)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ3X19D3256ZWN01W96c19DZW4sdW42cl9N3245Q2Vs3CAoUmVwdWJs1WMg32YgTW9sZG92YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq3x19d3256zwn01w96c19dzw4sdw42cl9n3245q2vs3caoumvwdwjs1wmg32ygtw9szg92yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0169.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ3X19D3256ZWN01W96c19DZW4sdW42cl9N3245Q2Vs3CAoUmVwdWJs1WMg32YgTW9sZG92YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq3x19d3256zwn01w96c19dzw4sdw42cl9n3245q2vs3caoumvwdwjs1wmg32ygtw9szg92yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0169.790] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml", cAlternateFileName="347__C~1.PRO")) returned 0x7d29d8 [0169.790] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cb6875, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cb6875, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml", cAlternateFileName="347__C~1.PRO")) returned 0 [0169.790] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0169.790] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\347__connections_cellular_moldcell (republic of moldova)_i0$(__mvid)@wap.provxml")) returned 1 [0169.791] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\347__Connections_Cellular_MoldCell (Republic of Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\347__connections_cellular_moldcell (republic of moldova)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0169.791] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="348__C~1.PRO")) returned 1 [0169.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\348__connections_cellular_sfr (réunion) (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq4x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.794] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0169.794] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.795] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0169.877] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0169.878] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0169.879] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0169.900] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0169.921] CloseHandle (hObject=0x204) returned 1 [0169.921] CloseHandle (hObject=0x1fc) returned 1 [0169.922] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\348__connections_cellular_sfr (réunion) (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq4x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0169.922] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq4x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0169.922] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="348__C~1.PRO")) returned 0x7d2ad8 [0169.922] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="348__C~1.PRO")) returned 0 [0169.922] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0169.923] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\348__connections_cellular_sfr (réunion) (france)_i0$(__mvid)@wap.provxml")) returned 1 [0169.923] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\348__Connections_Cellular_SFR (Réunion) (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\348__connections_cellular_sfr (réunion) (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0169.924] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="349__C~1.PRO")) returned 1 [0169.924] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\349__connections_cellular_sfr (réunion) (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0169.924] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq5x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0169.924] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0169.924] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0169.925] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.008] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0170.010] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0170.011] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0170.072] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0170.083] CloseHandle (hObject=0x1fc) returned 1 [0170.083] CloseHandle (hObject=0x204) returned 1 [0170.083] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\349__connections_cellular_sfr (réunion) (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq5x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0170.084] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzq5x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0170.084] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="349__C~1.PRO")) returned 0x7d2b98 [0170.084] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="349__C~1.PRO")) returned 0 [0170.084] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0170.085] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\349__connections_cellular_sfr (réunion) (france)_i1$(__mvid)@wap.provxml")) returned 1 [0170.086] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\349__Connections_Cellular_SFR (Réunion) (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\349__connections_cellular_sfr (réunion) (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0170.086] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="34__CO~1.PRO")) returned 1 [0170.086] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\34__connections_cellular_batelco (bahrain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0170.086] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0J2dGVsY28gKEJ21HJ21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzrfx0nv3m5ly3rp325zx0nl3g413gfyx0j2dgvsy28gkej21hj21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0170.087] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0170.087] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0170.087] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.238] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0170.240] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0170.240] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0170.265] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0170.276] CloseHandle (hObject=0x204) returned 1 [0170.276] CloseHandle (hObject=0x1fc) returned 1 [0170.276] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\34__connections_cellular_batelco (bahrain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0J2dGVsY28gKEJ21HJ21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzrfx0nv3m5ly3rp325zx0nl3g413gfyx0j2dgvsy28gkej21hj21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0170.277] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0J2dGVsY28gKEJ21HJ21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzrfx0nv3m5ly3rp325zx0nl3g413gfyx0j2dgvsy28gkej21hj21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0170.277] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="34__CO~1.PRO")) returned 0x7d3018 [0170.277] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="34__CO~1.PRO")) returned 0 [0170.277] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0170.278] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\34__connections_cellular_batelco (bahrain)_i0$(__mvid)@wap.provxml")) returned 1 [0170.279] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\34__Connections_Cellular_Batelco (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\34__connections_cellular_batelco (bahrain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0170.279] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="350__C~1.PRO")) returned 1 [0170.279] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\350__connections_cellular_sfr (réunion) (france)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0170.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUwX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuwx19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0170.281] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0170.281] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0170.281] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.346] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0170.348] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0170.349] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0170.372] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0170.382] CloseHandle (hObject=0x1fc) returned 1 [0170.382] CloseHandle (hObject=0x204) returned 1 [0170.383] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\350__connections_cellular_sfr (réunion) (france)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUwX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuwx19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0170.383] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUwX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuwx19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0170.384] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="350__C~1.PRO")) returned 0x7d2d58 [0170.384] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="350__C~1.PRO")) returned 0 [0170.384] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0170.384] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\350__connections_cellular_sfr (réunion) (france)_i2$(__mvid)@wap.provxml")) returned 1 [0170.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\350__Connections_Cellular_SFR (Réunion) (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\350__connections_cellular_sfr (réunion) (france)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0170.385] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="351__C~1.PRO")) returned 1 [0170.385] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\351__connections_cellular_sfr (réunion) (france)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0170.385] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu4x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0170.386] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0170.386] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0170.386] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.452] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0170.454] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0170.455] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0170.478] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0170.489] CloseHandle (hObject=0x204) returned 1 [0170.489] CloseHandle (hObject=0x1fc) returned 1 [0170.489] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\351__connections_cellular_sfr (réunion) (france)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu4x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0170.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKFLpdW5p324pIC2GcmF6Y2UpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu4x19d3256zwn01w96c19dzw4sdw42cl9trligkflpdw5p324pic2gcmf6y2upx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0170.490] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="351__C~1.PRO")) returned 0x7d2d58 [0170.490] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cdcae1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90cdcae1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90cdcae1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="351__C~1.PRO")) returned 0 [0170.490] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0170.490] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\351__connections_cellular_sfr (réunion) (france)_i3$(__mvid)@wap.provxml")) returned 1 [0170.491] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\351__Connections_Cellular_SFR (Réunion) (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\351__connections_cellular_sfr (réunion) (france)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0170.491] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="352__C~1.PRO")) returned 1 [0170.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\352__connections_cellular_orange (romania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0170.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFJv3WF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfjv3wf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0170.492] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0170.492] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0170.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.586] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0170.588] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0170.589] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0170.611] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0170.621] CloseHandle (hObject=0x1fc) returned 1 [0170.622] CloseHandle (hObject=0x204) returned 1 [0170.622] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\352__connections_cellular_orange (romania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFJv3WF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfjv3wf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0170.622] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFJv3WF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfjv3wf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0170.622] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="352__C~1.PRO")) returned 0x7d2998 [0170.623] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="352__C~1.PRO")) returned 0 [0170.623] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0170.623] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\352__connections_cellular_orange (romania)_i0$(__mvid)@wap.provxml")) returned 1 [0170.624] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\352__Connections_Cellular_Orange (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\352__connections_cellular_orange (romania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0170.624] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x0, cFileName="353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="353__C~1.PRO")) returned 1 [0170.624] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\353__connections_cellular_vodafone ro (romania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0170.624] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0170.625] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x314 [0170.625] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0170.625] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.880] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x314, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x314, lpOverlapped=0x0) returned 1 [0170.882] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0170.883] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0170.906] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0170.917] CloseHandle (hObject=0x204) returned 1 [0170.917] CloseHandle (hObject=0x1fc) returned 1 [0170.917] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\353__connections_cellular_vodafone ro (romania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0170.918] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0170.918] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="353__C~1.PRO")) returned 0x7d2b58 [0170.918] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x314, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="353__C~1.PRO")) returned 0 [0170.918] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0170.918] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\353__connections_cellular_vodafone ro (romania)_i0$(__mvid)@wap.provxml")) returned 1 [0170.919] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\353__Connections_Cellular_Vodafone RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\353__connections_cellular_vodafone ro (romania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0170.919] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="354__C~1.PRO")) returned 1 [0170.920] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\354__connections_cellular_vodafone ro (romania)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0170.920] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0170.920] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a6 [0170.920] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0170.921] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0170.986] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3a6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x3a6, lpOverlapped=0x0) returned 1 [0170.988] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3b0, lpOverlapped=0x0) returned 1 [0170.989] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.011] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.022] CloseHandle (hObject=0x1fc) returned 1 [0171.022] CloseHandle (hObject=0x204) returned 1 [0171.023] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\354__connections_cellular_vodafone ro (romania)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0171.023] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0171.023] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="354__C~1.PRO")) returned 0x7d2c58 [0171.023] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d02d4c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d02d4c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d02d4c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x3a6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="354__C~1.PRO")) returned 0 [0171.024] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0171.024] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\354__connections_cellular_vodafone ro (romania)_i1$(__mvid)@wap.provxml")) returned 1 [0171.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\354__Connections_Cellular_Vodafone RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\354__connections_cellular_vodafone ro (romania)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0171.025] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml", cAlternateFileName="355__C~1.PRO")) returned 1 [0171.025] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\355__connections_cellular_vodafone ro (romania)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.025] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.025] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x392 [0171.026] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.026] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.086] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x392, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x392, lpOverlapped=0x0) returned 1 [0171.087] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3a0, lpOverlapped=0x0) returned 1 [0171.089] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.111] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.122] CloseHandle (hObject=0x204) returned 1 [0171.122] CloseHandle (hObject=0x1fc) returned 1 [0171.122] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\355__connections_cellular_vodafone ro (romania)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0171.123] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBSTyAoUm9tYW5pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbstyaoum9tyw5pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0171.123] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml", cAlternateFileName="355__C~1.PRO")) returned 0x7d2998 [0171.123] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml", cAlternateFileName="355__C~1.PRO")) returned 0 [0171.123] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0171.123] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\355__connections_cellular_vodafone ro (romania)_i2$(__mvid)@wap.provxml")) returned 1 [0171.124] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\355__Connections_Cellular_Vodafone RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\355__connections_cellular_vodafone ro (romania)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0171.124] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="356__C~1.PRO")) returned 1 [0171.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\356__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.125] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0171.125] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.125] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.212] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0171.213] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0171.213] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.236] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.247] CloseHandle (hObject=0x1fc) returned 1 [0171.247] CloseHandle (hObject=0x204) returned 1 [0171.247] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\356__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0171.248] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0171.248] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="356__C~1.PRO")) returned 0x7d2c98 [0171.248] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="356__C~1.PRO")) returned 0 [0171.248] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0171.248] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\356__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0171.249] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\356__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\356__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0171.249] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="357_CO~1.PRO")) returned 1 [0171.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\357_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU3X0Nv3m5lY3Rp325zX0Nl3G413GFyX0NoZW45YWJp3nNrIENl3G413GFyIENv3W113mljYXRp325zIE4MQyAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu3x0nv3m5ly3rp325zx0nl3g413gfyx0nozw45ywjp3nnrienl3g413gfyienv3w113mljyxrp325zie4mqyaounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.250] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fb [0171.250] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.251] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.318] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2fb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2fb, lpOverlapped=0x0) returned 1 [0171.320] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0171.321] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.343] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.354] CloseHandle (hObject=0x204) returned 1 [0171.354] CloseHandle (hObject=0x1fc) returned 1 [0171.354] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\357_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU3X0Nv3m5lY3Rp325zX0Nl3G413GFyX0NoZW45YWJp3nNrIENl3G413GFyIENv3W113mljYXRp325zIE4MQyAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu3x0nv3m5ly3rp325zx0nl3g413gfyx0nozw45ywjp3nnrienl3g413gfyienv3w113mljyxrp325zie4mqyaounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0171.355] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU3X0Nv3m5lY3Rp325zX0Nl3G413GFyX0NoZW45YWJp3nNrIENl3G413GFyIENv3W113mljYXRp325zIE4MQyAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu3x0nv3m5ly3rp325zx0nl3g413gfyx0nozw45ywjp3nnrienl3g413gfyienv3w113mljyxrp325zie4mqyaounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0171.355] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="357_CO~1.PRO")) returned 0x7d2b18 [0171.355] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="357_CO~1.PRO")) returned 0 [0171.355] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0171.355] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\357_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0171.356] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\357_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\357_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0171.356] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2b7, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml", cAlternateFileName="358_CO~1.PRO")) returned 1 [0171.356] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\358_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.357] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU4X0Nv3m5lY3Rp325zX0Nl3G413GFyX0NoZW45YWJp3nNrIENl3G413GFyIENv3W113mljYXRp325zIE4MQyAoUnVzc2l23iBGZWRlcmF01W96KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu4x0nv3m5ly3rp325zx0nl3g413gfyx0nozw45ywjp3nnrienl3g413gfyienv3w113mljyxrp325zie4mqyaounvzc2l23ibgzwrlcmf01w96kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.357] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b7 [0171.357] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.358] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.498] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2b7, lpOverlapped=0x0) returned 1 [0171.500] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0171.501] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.526] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.537] CloseHandle (hObject=0x1fc) returned 1 [0171.538] CloseHandle (hObject=0x204) returned 1 [0171.538] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\358_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU4X0Nv3m5lY3Rp325zX0Nl3G413GFyX0NoZW45YWJp3nNrIENl3G413GFyIENv3W113mljYXRp325zIE4MQyAoUnVzc2l23iBGZWRlcmF01W96KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu4x0nv3m5ly3rp325zx0nl3g413gfyx0nozw45ywjp3nnrienl3g413gfyienv3w113mljyxrp325zie4mqyaounvzc2l23ibgzwrlcmf01w96kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0171.539] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU4X0Nv3m5lY3Rp325zX0Nl3G413GFyX0NoZW45YWJp3nNrIENl3G413GFyIENv3W113mljYXRp325zIE4MQyAoUnVzc2l23iBGZWRlcmF01W96KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu4x0nv3m5ly3rp325zx0nl3g413gfyx0nozw45ywjp3nnrienl3g413gfyienv3w113mljyxrp325zie4mqyaounvzc2l23ibgzwrlcmf01w96kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0171.539] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2b7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml", cAlternateFileName="358_CO~1.PRO")) returned 0x7d2a58 [0171.539] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2b7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml", cAlternateFileName="358_CO~1.PRO")) returned 0 [0171.539] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0171.539] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\358_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i1$(__mvid)@wap.provxml")) returned 1 [0171.540] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\358_Connections_Cellular_Chelyabinsk Cellular Communications LLC (Russian Federation)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\358_connections_cellular_chelyabinsk cellular communications llc (russian federation)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0171.540] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f1, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="359__C~1.PRO")) returned 1 [0171.540] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\359__connections_cellular_dontelecom (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.541] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU5X19D3256ZWN01W96c19DZW4sdW42cl9E325UZW4lQ29tIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu5x19d3256zwn01w96c19dzw4sdw42cl9e325uzw4lq29tic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.541] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f1 [0171.541] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.542] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.610] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f1, lpOverlapped=0x0) returned 1 [0171.613] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0171.614] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.645] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.656] CloseHandle (hObject=0x204) returned 1 [0171.656] CloseHandle (hObject=0x1fc) returned 1 [0171.656] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\359__connections_cellular_dontelecom (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU5X19D3256ZWN01W96c19DZW4sdW42cl9E325UZW4lQ29tIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu5x19d3256zwn01w96c19dzw4sdw42cl9e325uzw4lq29tic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0171.657] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzU5X19D3256ZWN01W96c19DZW4sdW42cl9E325UZW4lQ29tIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzu5x19d3256zwn01w96c19dzw4sdw42cl9e325uzw4lq29tic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0171.657] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="359__C~1.PRO")) returned 0x7d3018 [0171.657] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="359__C~1.PRO")) returned 0 [0171.657] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0171.658] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\359__connections_cellular_dontelecom (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0171.659] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\359__Connections_Cellular_DonTeleCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\359__connections_cellular_dontelecom (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0171.659] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x0, cFileName="35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="35__CO~1.PRO")) returned 1 [0171.659] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\35__connections_cellular_zain bh (bahrain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.659] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1p21W4gQ5ggKEJ21HJ21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzvfx0nv3m5ly3rp325zx0nl3g413gfyx1p21w4gq5ggkej21hj21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.660] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x347 [0171.660] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.660] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.766] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x347, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x347, lpOverlapped=0x0) returned 1 [0171.767] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0171.768] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.791] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.802] CloseHandle (hObject=0x1fc) returned 1 [0171.802] CloseHandle (hObject=0x204) returned 1 [0171.811] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\35__connections_cellular_zain bh (bahrain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1p21W4gQ5ggKEJ21HJ21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzvfx0nv3m5ly3rp325zx0nl3g413gfyx1p21w4gq5ggkej21hj21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0171.812] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1p21W4gQ5ggKEJ21HJ21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzvfx0nv3m5ly3rp325zx0nl3g413gfyx1p21w4gq5ggkej21hj21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0171.812] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="35__CO~1.PRO")) returned 0x7d3018 [0171.812] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="35__CO~1.PRO")) returned 0 [0171.812] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0171.812] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\35__connections_cellular_zain bh (bahrain)_i0$(__mvid)@wap.provxml")) returned 1 [0171.813] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\35__Connections_Cellular_Zain BH (Bahrain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\35__connections_cellular_zain bh (bahrain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0171.813] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x0, cFileName="360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="360__C~1.PRO")) returned 1 [0171.814] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\360__connections_cellular_ermak rms (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0171.814] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYwX19D3256ZWN01W96c19DZW4sdW42cl9Fcm121yBSTVMgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzywx19d3256zwn01w96c19dzw4sdw42cl9fcm121ybstvmgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0171.814] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x297 [0171.814] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0171.815] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0171.878] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x297, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x297, lpOverlapped=0x0) returned 1 [0171.880] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0171.881] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0171.903] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0171.997] CloseHandle (hObject=0x204) returned 1 [0171.997] CloseHandle (hObject=0x1fc) returned 1 [0171.997] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\360__connections_cellular_ermak rms (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYwX19D3256ZWN01W96c19DZW4sdW42cl9Fcm121yBSTVMgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzywx19d3256zwn01w96c19dzw4sdw42cl9fcm121ybstvmgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0171.998] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYwX19D3256ZWN01W96c19DZW4sdW42cl9Fcm121yBSTVMgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzywx19d3256zwn01w96c19dzw4sdw42cl9fcm121ybstvmgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0171.998] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="360__C~1.PRO")) returned 0x7d2b58 [0171.998] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d28fbc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d28fbc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d28fbc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x297, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="360__C~1.PRO")) returned 0 [0171.998] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0171.998] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\360__connections_cellular_ermak rms (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0171.999] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\360__Connections_Cellular_Ermak RMS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\360__connections_cellular_ermak rms (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0171.999] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="361__C~1.PRO")) returned 1 [0171.999] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\361__connections_cellular_megafon (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.000] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY4X19D3256ZWN01W96c19DZW4sdW42cl9NZWd2Rm96IC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy4x19d3256zwn01w96c19dzw4sdw42cl9nzwd2rm96ic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.000] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0172.000] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.001] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.078] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0172.082] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0172.084] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.106] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.120] CloseHandle (hObject=0x1fc) returned 1 [0172.120] CloseHandle (hObject=0x204) returned 1 [0172.123] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\361__connections_cellular_megafon (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY4X19D3256ZWN01W96c19DZW4sdW42cl9NZWd2Rm96IC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy4x19d3256zwn01w96c19dzw4sdw42cl9nzwd2rm96ic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0172.125] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY4X19D3256ZWN01W96c19DZW4sdW42cl9NZWd2Rm96IC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy4x19d3256zwn01w96c19dzw4sdw42cl9nzwd2rm96ic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0172.125] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="361__C~1.PRO")) returned 0x7d2d58 [0172.125] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="361__C~1.PRO")) returned 0 [0172.125] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0172.125] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\361__connections_cellular_megafon (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0172.126] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\361__Connections_Cellular_MegaFon (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\361__connections_cellular_megafon (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0172.126] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="362__C~1.PRO")) returned 1 [0172.129] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\362__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.130] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzyyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.130] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c6 [0172.130] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.131] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.195] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c6, lpOverlapped=0x0) returned 1 [0172.197] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0172.198] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.220] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.231] CloseHandle (hObject=0x204) returned 1 [0172.231] CloseHandle (hObject=0x1fc) returned 1 [0172.232] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\362__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzyyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0172.232] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzyyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0172.232] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="362__C~1.PRO")) returned 0x7d3018 [0172.233] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="362__C~1.PRO")) returned 0 [0172.233] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0172.233] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\362__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0172.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\362__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\362__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0172.234] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="363__C~1.PRO")) returned 1 [0172.234] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\363__connections_cellular_mts (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.234] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYzX19D3256ZWN01W96c19DZW4sdW42cl9NVFMgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzyzx19d3256zwn01w96c19dzw4sdw42cl9nvfmgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.235] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0172.235] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.235] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.322] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0172.323] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0172.324] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.347] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.358] CloseHandle (hObject=0x1fc) returned 1 [0172.358] CloseHandle (hObject=0x204) returned 1 [0172.358] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\363__connections_cellular_mts (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYzX19D3256ZWN01W96c19DZW4sdW42cl9NVFMgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzyzx19d3256zwn01w96c19dzw4sdw42cl9nvfmgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0172.359] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzYzX19D3256ZWN01W96c19DZW4sdW42cl9NVFMgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzyzx19d3256zwn01w96c19dzw4sdw42cl9nvfmgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0172.359] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="363__C~1.PRO")) returned 0x7d3018 [0172.359] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="363__C~1.PRO")) returned 0 [0172.359] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0172.359] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\363__connections_cellular_mts (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0172.360] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\363__Connections_Cellular_MTS (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\363__connections_cellular_mts (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0172.360] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="364__C~1.PRO")) returned 1 [0172.360] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\364__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.361] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.361] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0172.361] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.361] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.422] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0172.423] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0172.424] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.447] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.457] CloseHandle (hObject=0x204) returned 1 [0172.457] CloseHandle (hObject=0x1fc) returned 1 [0172.458] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\364__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0172.458] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0172.458] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="364__C~1.PRO")) returned 0x7d2998 [0172.458] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="364__C~1.PRO")) returned 0 [0172.458] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0172.459] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\364__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0172.461] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\364__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\364__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0172.461] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="365__C~1.PRO")) returned 1 [0172.461] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\365__connections_cellular_ncc (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.461] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY1X19D3256ZWN01W96c19DZW4sdW42cl9OQ0MgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy1x19d3256zwn01w96c19dzw4sdw42cl9oq0mgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.462] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0172.462] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.462] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.549] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0172.552] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0172.552] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.575] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.587] CloseHandle (hObject=0x1fc) returned 1 [0172.587] CloseHandle (hObject=0x204) returned 1 [0172.587] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\365__connections_cellular_ncc (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY1X19D3256ZWN01W96c19DZW4sdW42cl9OQ0MgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy1x19d3256zwn01w96c19dzw4sdw42cl9oq0mgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0172.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY1X19D3256ZWN01W96c19DZW4sdW42cl9OQ0MgKFJ1c3NpYW4gRmV5ZXJ2dGlv3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy1x19d3256zwn01w96c19dzw4sdw42cl9oq0mgkfj1c3npyw4grmv5zxj2dglv3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0172.588] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="365__C~1.PRO")) returned 0x7d2d58 [0172.588] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d4f224, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d4f224, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d4f224, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="365__C~1.PRO")) returned 0 [0172.588] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0172.588] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\365__connections_cellular_ncc (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0172.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\365__Connections_Cellular_NCC (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\365__connections_cellular_ncc (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0172.589] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="366__C~1.PRO")) returned 1 [0172.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\366__connections_cellular_ntc (new telephone co) (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY2X19D3256ZWN01W96c19DZW4sdW42cl9OVEMgKE5ldyBUZW4lcG2v3mUgQ28pIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy2x19d3256zwn01w96c19dzw4sdw42cl9ovemgke5ldybuzw4lcg2v3mugq28pic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.590] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a1 [0172.590] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.591] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.667] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a1, lpOverlapped=0x0) returned 1 [0172.668] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0172.670] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.779] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.790] CloseHandle (hObject=0x204) returned 1 [0172.790] CloseHandle (hObject=0x1fc) returned 1 [0172.790] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\366__connections_cellular_ntc (new telephone co) (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY2X19D3256ZWN01W96c19DZW4sdW42cl9OVEMgKE5ldyBUZW4lcG2v3mUgQ28pIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy2x19d3256zwn01w96c19dzw4sdw42cl9ovemgke5ldybuzw4lcg2v3mugq28pic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0172.791] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY2X19D3256ZWN01W96c19DZW4sdW42cl9OVEMgKE5ldyBUZW4lcG2v3mUgQ28pIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy2x19d3256zwn01w96c19dzw4sdw42cl9ovemgke5ldybuzw4lcg2v3mugq28pic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0172.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="366__C~1.PRO")) returned 0x7d3098 [0172.791] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="366__C~1.PRO")) returned 0 [0172.791] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0172.791] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\366__connections_cellular_ntc (new telephone co) (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0172.792] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\366__Connections_Cellular_NTC (New Telephone Co) (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\366__connections_cellular_ntc (new telephone co) (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0172.792] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="367__C~1.PRO")) returned 1 [0172.793] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\367__connections_cellular_ojsc sibirtelecom (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.793] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY3X19D3256ZWN01W96c19DZW4sdW42cl9PSlNDIFNpYmlydGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy3x19d3256zwn01w96c19dzw4sdw42cl9pslndifnpymlydgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.793] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0172.793] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.794] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.860] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f8, lpOverlapped=0x0) returned 1 [0172.861] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0172.862] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.885] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0172.895] CloseHandle (hObject=0x1fc) returned 1 [0172.895] CloseHandle (hObject=0x204) returned 1 [0172.895] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\367__connections_cellular_ojsc sibirtelecom (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY3X19D3256ZWN01W96c19DZW4sdW42cl9PSlNDIFNpYmlydGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy3x19d3256zwn01w96c19dzw4sdw42cl9pslndifnpymlydgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0172.896] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY3X19D3256ZWN01W96c19DZW4sdW42cl9PSlNDIFNpYmlydGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy3x19d3256zwn01w96c19dzw4sdw42cl9pslndifnpymlydgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0172.896] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="367__C~1.PRO")) returned 0x7d3018 [0172.896] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="367__C~1.PRO")) returned 0 [0172.896] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0172.896] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\367__connections_cellular_ojsc sibirtelecom (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0172.901] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\367__Connections_Cellular_OJSC Sibirtelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\367__connections_cellular_ojsc sibirtelecom (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0172.901] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="368__C~1.PRO")) returned 1 [0172.902] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\368__connections_cellular_ojsc vimpelcom (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0172.902] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY4X19D3256ZWN01W96c19DZW4sdW42cl9PSlNDIFZp3XBl3ENv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy4x19d3256zwn01w96c19dzw4sdw42cl9pslndifzp3xbl3env3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0172.902] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e2 [0172.902] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0172.903] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0172.966] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e2, lpOverlapped=0x0) returned 1 [0172.967] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0172.968] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0172.992] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0173.003] CloseHandle (hObject=0x204) returned 1 [0173.003] CloseHandle (hObject=0x1fc) returned 1 [0173.003] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\368__connections_cellular_ojsc vimpelcom (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY4X19D3256ZWN01W96c19DZW4sdW42cl9PSlNDIFZp3XBl3ENv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy4x19d3256zwn01w96c19dzw4sdw42cl9pslndifzp3xbl3env3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0173.003] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY4X19D3256ZWN01W96c19DZW4sdW42cl9PSlNDIFZp3XBl3ENv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy4x19d3256zwn01w96c19dzw4sdw42cl9pslndifzp3xbl3env3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0173.004] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="368__C~1.PRO")) returned 0x7d2a18 [0173.004] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="368__C~1.PRO")) returned 0 [0173.004] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0173.004] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\368__connections_cellular_ojsc vimpelcom (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0173.005] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\368__Connections_Cellular_OJSC VimpelCom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\368__connections_cellular_ojsc vimpelcom (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0173.005] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="369__C~1.PRO")) returned 1 [0173.005] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\369__connections_cellular_primtel (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0173.005] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY5X19D3256ZWN01W96c19DZW4sdW42cl9QcmltVGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy5x19d3256zwn01w96c19dzw4sdw42cl9qcmltvgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0173.006] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0173.006] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0173.006] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0173.100] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0173.102] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0173.103] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0173.134] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0173.145] CloseHandle (hObject=0x1fc) returned 1 [0173.145] CloseHandle (hObject=0x204) returned 1 [0173.145] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\369__connections_cellular_primtel (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY5X19D3256ZWN01W96c19DZW4sdW42cl9QcmltVGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy5x19d3256zwn01w96c19dzw4sdw42cl9qcmltvgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0173.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzY5X19D3256ZWN01W96c19DZW4sdW42cl9QcmltVGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzy5x19d3256zwn01w96c19dzw4sdw42cl9qcmltvgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0173.146] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="369__C~1.PRO")) returned 0x7d2a58 [0173.146] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d7548b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d7548b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d7548b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="369__C~1.PRO")) returned 0 [0173.146] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0173.146] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\369__connections_cellular_primtel (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0173.147] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\369__Connections_Cellular_PrimTel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\369__connections_cellular_primtel (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0173.147] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml", cAlternateFileName="36__CO~1.PRO")) returned 1 [0173.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\36__connections_cellular_grameen phone (bangladesh)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0173.148] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0dyYW1lZW4gUG2v3mUgKEJ23mdsYWRlc2gpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzzfx0nv3m5ly3rp325zx0nl3g413gfyx0dyyw1lzw4gug2v3mugkej23mdsywrlc2gpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0173.148] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0173.148] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0173.149] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0173.249] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28e, lpOverlapped=0x0) returned 1 [0173.251] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0173.252] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0173.322] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0173.333] CloseHandle (hObject=0x204) returned 1 [0173.333] CloseHandle (hObject=0x1fc) returned 1 [0173.333] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\36__connections_cellular_grameen phone (bangladesh)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0dyYW1lZW4gUG2v3mUgKEJ23mdsYWRlc2gpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzzfx0nv3m5ly3rp325zx0nl3g413gfyx0dyyw1lzw4gug2v3mugkej23mdsywrlc2gpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0173.334] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0dyYW1lZW4gUG2v3mUgKEJ23mdsYWRlc2gpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzzfx0nv3m5ly3rp325zx0nl3g413gfyx0dyyw1lzw4gug2v3mugkej23mdsywrlc2gpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0173.334] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml", cAlternateFileName="36__CO~1.PRO")) returned 0x7d2c18 [0173.334] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml", cAlternateFileName="36__CO~1.PRO")) returned 0 [0173.334] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0173.334] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\36__connections_cellular_grameen phone (bangladesh)_i0$(__mvid)@wap.provxml")) returned 1 [0173.335] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\36__Connections_Cellular_Grameen Phone (Bangladesh)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\36__connections_cellular_grameen phone (bangladesh)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0173.336] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x0, cFileName="370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="370__C~1.PRO")) returned 1 [0173.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\370__connections_cellular_uraltel (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0173.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0173.337] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x315 [0173.337] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0173.337] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0173.518] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x315, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x315, lpOverlapped=0x0) returned 1 [0173.520] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0173.521] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0173.619] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0173.630] CloseHandle (hObject=0x1fc) returned 1 [0173.630] CloseHandle (hObject=0x204) returned 1 [0173.631] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\370__connections_cellular_uraltel (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0173.640] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0173.640] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="370__C~1.PRO")) returned 0x7d3098 [0173.640] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x315, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="370__C~1.PRO")) returned 0 [0173.640] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0173.640] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\370__connections_cellular_uraltel (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0173.641] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\370__Connections_Cellular_Uraltel (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\370__connections_cellular_uraltel (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0173.642] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="371__C~1.PRO")) returned 1 [0173.642] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\371__connections_cellular_yeniseytelecom (russian federation)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0173.642] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0173.643] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2de [0173.643] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0173.643] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0173.836] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2de, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2de, lpOverlapped=0x0) returned 1 [0173.838] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0173.839] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0173.861] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0173.871] CloseHandle (hObject=0x204) returned 1 [0173.871] CloseHandle (hObject=0x1fc) returned 1 [0173.872] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\371__connections_cellular_yeniseytelecom (russian federation)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0173.872] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0173.872] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="371__C~1.PRO")) returned 0x7d3018 [0173.872] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml", cAlternateFileName="371__C~1.PRO")) returned 0 [0173.873] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0173.873] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\371__connections_cellular_yeniseytelecom (russian federation)_i0$(__mvid)@wap.provxml")) returned 1 [0173.874] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\371__Connections_Cellular_Yeniseytelecom (Russian Federation)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\371__connections_cellular_yeniseytelecom (russian federation)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0173.874] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="372__C~1.PRO")) returned 1 [0173.874] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\372__connections_cellular_mobily (saudi arabia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0173.914] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0173.914] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0173.914] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0173.915] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0174.167] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0174.168] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0174.170] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0174.192] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0174.250] CloseHandle (hObject=0x1fc) returned 1 [0174.250] CloseHandle (hObject=0x204) returned 1 [0174.250] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\372__connections_cellular_mobily (saudi arabia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0174.251] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0174.251] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="372__C~1.PRO")) returned 0x7d2ad8 [0174.251] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="372__C~1.PRO")) returned 0 [0174.251] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0174.251] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\372__connections_cellular_mobily (saudi arabia)_i0$(__mvid)@wap.provxml")) returned 1 [0174.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\372__Connections_Cellular_Mobily (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\372__connections_cellular_mobily (saudi arabia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0174.252] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="373__C~1.PRO")) returned 1 [0174.253] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\373__connections_cellular_mobily (saudi arabia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0174.253] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0174.253] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0174.253] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0174.254] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0174.448] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0174.449] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0174.450] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0174.534] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0174.545] CloseHandle (hObject=0x204) returned 1 [0174.545] CloseHandle (hObject=0x1fc) returned 1 [0174.545] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\373__connections_cellular_mobily (saudi arabia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0174.546] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0174.546] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="373__C~1.PRO")) returned 0x7d2998 [0174.546] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="373__C~1.PRO")) returned 0 [0174.546] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0174.546] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\373__connections_cellular_mobily (saudi arabia)_i1$(__mvid)@wap.provxml")) returned 1 [0174.547] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\373__Connections_Cellular_Mobily (Saudi Arabia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\373__connections_cellular_mobily (saudi arabia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0174.547] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="374__C~1.PRO")) returned 1 [0174.547] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\374__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0174.549] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0174.549] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cf [0174.549] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0174.549] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0174.747] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cf, lpOverlapped=0x0) returned 1 [0174.748] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0174.749] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0174.774] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0174.784] CloseHandle (hObject=0x1fc) returned 1 [0174.784] CloseHandle (hObject=0x204) returned 1 [0174.784] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\374__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0174.785] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0174.785] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="374__C~1.PRO")) returned 0x7d2c98 [0174.785] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90d9b6fb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90d9b6fb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90d9b6fb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="374__C~1.PRO")) returned 0 [0174.785] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0174.785] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\374__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0174.786] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\374__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\374__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0174.786] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="375__C~1.PRO")) returned 1 [0174.787] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\375__connections_cellular_mtc saudi arabia (saudi arabia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0174.787] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0174.787] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x291 [0174.834] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0174.835] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0174.941] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x291, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x291, lpOverlapped=0x0) returned 1 [0174.942] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0174.943] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0174.965] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0175.056] CloseHandle (hObject=0x204) returned 1 [0175.056] CloseHandle (hObject=0x1fc) returned 1 [0175.057] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\375__connections_cellular_mtc saudi arabia (saudi arabia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0175.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0175.057] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="375__C~1.PRO")) returned 0x7d2998 [0175.058] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="375__C~1.PRO")) returned 0 [0175.058] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0175.058] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\375__connections_cellular_mtc saudi arabia (saudi arabia)_i0$(__mvid)@wap.provxml")) returned 1 [0175.059] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\375__Connections_Cellular_MTC Saudi Arabia (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\375__connections_cellular_mtc saudi arabia (saudi arabia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0175.059] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="376__C~1.PRO")) returned 1 [0175.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\376__connections_cellular_stc (saudi arabia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0175.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0175.060] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28b [0175.060] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0175.060] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0175.175] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28b, lpOverlapped=0x0) returned 1 [0175.177] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0175.178] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0175.244] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0175.255] CloseHandle (hObject=0x1fc) returned 1 [0175.255] CloseHandle (hObject=0x204) returned 1 [0175.255] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\376__connections_cellular_stc (saudi arabia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0175.256] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0175.256] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="376__C~1.PRO")) returned 0x7d3018 [0175.256] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="376__C~1.PRO")) returned 0 [0175.256] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0175.256] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\376__connections_cellular_stc (saudi arabia)_i0$(__mvid)@wap.provxml")) returned 1 [0175.257] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\376__Connections_Cellular_STC (Saudi Arabia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\376__connections_cellular_stc (saudi arabia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0175.257] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", cAlternateFileName="377__C~1.PRO")) returned 1 [0175.259] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\377__connections_cellular_mobilna telefonija srbije rs (serbia (republic of))_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0175.260] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0175.260] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e7 [0175.260] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0175.260] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0175.420] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e7, lpOverlapped=0x0) returned 1 [0175.422] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0175.423] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0175.445] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0175.456] CloseHandle (hObject=0x204) returned 1 [0175.456] CloseHandle (hObject=0x1fc) returned 1 [0175.457] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\377__connections_cellular_mobilna telefonija srbije rs (serbia (republic of))_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0175.457] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0175.457] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", cAlternateFileName="377__C~1.PRO")) returned 0x7d2a58 [0175.458] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90dc1962, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90dc1962, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90dc1962, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", cAlternateFileName="377__C~1.PRO")) returned 0 [0175.458] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0175.458] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\377__connections_cellular_mobilna telefonija srbije rs (serbia (republic of))_i0$(__mvid)@wap.provxml")) returned 1 [0175.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\377__Connections_Cellular_Mobilna telefonija Srbije RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\377__connections_cellular_mobilna telefonija srbije rs (serbia (republic of))_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0175.459] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x386, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="378__C~1.PRO")) returned 1 [0175.459] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\378__connections_cellular_telenor (serbia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0175.517] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0175.517] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x386 [0175.517] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0175.518] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0175.669] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x386, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x386, lpOverlapped=0x0) returned 1 [0175.671] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0175.672] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0175.797] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0175.808] CloseHandle (hObject=0x1fc) returned 1 [0175.808] CloseHandle (hObject=0x204) returned 1 [0175.808] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\378__connections_cellular_telenor (serbia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0175.809] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0175.809] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x386, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="378__C~1.PRO")) returned 0x7d3018 [0175.809] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x386, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="378__C~1.PRO")) returned 0 [0175.809] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0175.809] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\378__connections_cellular_telenor (serbia)_i0$(__mvid)@wap.provxml")) returned 1 [0175.810] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\378__Connections_Cellular_Telenor (Serbia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\378__connections_cellular_telenor (serbia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0175.810] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="379__C~1.PRO")) returned 1 [0175.811] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\379__connections_cellular_telenor (serbia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0175.811] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0175.811] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x37c [0175.811] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0175.812] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0175.970] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x37c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x37c, lpOverlapped=0x0) returned 1 [0175.974] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0175.975] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0176.044] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.055] CloseHandle (hObject=0x204) returned 1 [0176.055] CloseHandle (hObject=0x1fc) returned 1 [0176.055] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\379__connections_cellular_telenor (serbia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0176.056] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0176.056] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="379__C~1.PRO")) returned 0x7d2b98 [0176.056] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="379__C~1.PRO")) returned 0 [0176.056] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0176.056] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\379__connections_cellular_telenor (serbia)_i1$(__mvid)@wap.provxml")) returned 1 [0176.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\379__Connections_Cellular_Telenor (Serbia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\379__connections_cellular_telenor (serbia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0176.057] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="37__CO~1.PRO")) returned 1 [0176.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\37__connections_cellular_best (belarus)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0176.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0176.058] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0176.058] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0176.059] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0176.169] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0176.212] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0176.213] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0176.233] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.243] CloseHandle (hObject=0x1fc) returned 1 [0176.243] CloseHandle (hObject=0x204) returned 1 [0176.243] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\37__connections_cellular_best (belarus)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0176.244] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0176.244] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="37__CO~1.PRO")) returned 0x7d2c98 [0176.244] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901fba3a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901fba3a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901fba3a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="37__CO~1.PRO")) returned 0 [0176.245] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0176.245] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\37__connections_cellular_best (belarus)_i0$(__mvid)@wap.provxml")) returned 1 [0176.246] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\37__Connections_Cellular_BeST (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\37__connections_cellular_best (belarus)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0176.246] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="380__C~1.PRO")) returned 1 [0176.246] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\380__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0176.246] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0176.247] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cd [0176.247] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0176.247] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0176.409] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cd, lpOverlapped=0x0) returned 1 [0176.418] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0176.419] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0176.444] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.503] CloseHandle (hObject=0x204) returned 1 [0176.503] CloseHandle (hObject=0x1fc) returned 1 [0176.503] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\380__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0176.504] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0176.504] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="380__C~1.PRO")) returned 0x7d3018 [0176.504] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="380__C~1.PRO")) returned 0 [0176.504] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0176.505] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\380__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0176.506] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\380__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\380__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0176.506] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x31e, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", cAlternateFileName="381__C~1.PRO")) returned 1 [0176.506] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\381__connections_cellular_vip mobile rs (serbia (republic of))_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0176.506] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0176.507] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x31e [0176.507] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0176.507] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0176.731] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x31e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x31e, lpOverlapped=0x0) returned 1 [0176.733] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0176.734] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0176.757] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0176.971] CloseHandle (hObject=0x1fc) returned 1 [0176.971] CloseHandle (hObject=0x204) returned 1 [0176.971] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\381__connections_cellular_vip mobile rs (serbia (republic of))_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0176.972] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0176.972] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x31e, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", cAlternateFileName="381__C~1.PRO")) returned 0x7d2d58 [0176.972] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x31e, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml", cAlternateFileName="381__C~1.PRO")) returned 0 [0176.972] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0176.972] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\381__connections_cellular_vip mobile rs (serbia (republic of))_i0$(__mvid)@wap.provxml")) returned 1 [0176.973] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\381__Connections_Cellular_Vip Mobile RS (Serbia (Republic of))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\381__connections_cellular_vip mobile rs (serbia (republic of))_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0176.973] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="382__C~1.PRO")) returned 1 [0176.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\382__connections_cellular_mobileone (singapore)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0176.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0176.974] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0176.974] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0176.975] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0177.068] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0177.069] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0177.072] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0177.122] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.133] CloseHandle (hObject=0x204) returned 1 [0177.133] CloseHandle (hObject=0x1fc) returned 1 [0177.133] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\382__connections_cellular_mobileone (singapore)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0177.134] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0177.134] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="382__C~1.PRO")) returned 0x7d3018 [0177.134] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90de7bce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90de7bce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90de7bce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="382__C~1.PRO")) returned 0 [0177.134] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0177.134] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\382__connections_cellular_mobileone (singapore)_i0$(__mvid)@wap.provxml")) returned 1 [0177.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\382__Connections_Cellular_MobileOne (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\382__connections_cellular_mobileone (singapore)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0177.135] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="383__C~1.PRO")) returned 1 [0177.136] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\383__connections_cellular_mobileone (singapore)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0177.153] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0177.154] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0177.154] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0177.154] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0177.266] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0177.268] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0177.269] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0177.367] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.378] CloseHandle (hObject=0x1fc) returned 1 [0177.378] CloseHandle (hObject=0x204) returned 1 [0177.378] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\383__connections_cellular_mobileone (singapore)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0177.379] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0177.379] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="383__C~1.PRO")) returned 0x7d2ad8 [0177.379] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="383__C~1.PRO")) returned 0 [0177.379] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0177.379] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\383__connections_cellular_mobileone (singapore)_i1$(__mvid)@wap.provxml")) returned 1 [0177.380] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\383__Connections_Cellular_MobileOne (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\383__connections_cellular_mobileone (singapore)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0177.380] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="384__C~1.PRO")) returned 1 [0177.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\384__connections_cellular_singtel (singapore)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0177.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0177.381] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0177.381] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0177.382] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0177.521] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0177.522] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0177.523] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0177.598] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.609] CloseHandle (hObject=0x204) returned 1 [0177.609] CloseHandle (hObject=0x1fc) returned 1 [0177.609] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\384__connections_cellular_singtel (singapore)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0177.610] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0177.610] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="384__C~1.PRO")) returned 0x7d2998 [0177.610] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="384__C~1.PRO")) returned 0 [0177.610] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0177.610] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\384__connections_cellular_singtel (singapore)_i0$(__mvid)@wap.provxml")) returned 1 [0177.611] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\384__Connections_Cellular_Singtel (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\384__connections_cellular_singtel (singapore)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0177.611] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="385__C~1.PRO")) returned 1 [0177.611] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\385__connections_cellular_singtel (singapore)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0177.611] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0177.612] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0177.612] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0177.612] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0177.839] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0177.842] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0177.843] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0177.866] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0177.877] CloseHandle (hObject=0x1fc) returned 1 [0177.877] CloseHandle (hObject=0x204) returned 1 [0177.877] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\385__connections_cellular_singtel (singapore)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0177.878] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0177.878] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="385__C~1.PRO")) returned 0x7d2918 [0177.878] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="385__C~1.PRO")) returned 0 [0177.878] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0177.878] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\385__connections_cellular_singtel (singapore)_i1$(__mvid)@wap.provxml")) returned 1 [0177.879] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\385__Connections_Cellular_Singtel (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\385__connections_cellular_singtel (singapore)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0177.879] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml", cAlternateFileName="386__C~1.PRO")) returned 1 [0177.880] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\386__connections_cellular_singtel (singapore)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0177.880] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0177.881] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0177.881] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0177.881] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.048] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0178.086] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0178.087] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.109] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.119] CloseHandle (hObject=0x204) returned 1 [0178.119] CloseHandle (hObject=0x1fc) returned 1 [0178.119] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\386__connections_cellular_singtel (singapore)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0178.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0178.120] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml", cAlternateFileName="386__C~1.PRO")) returned 0x7d2b18 [0178.120] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml", cAlternateFileName="386__C~1.PRO")) returned 0 [0178.120] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0178.120] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\386__connections_cellular_singtel (singapore)_i2$(__mvid)@wap.provxml")) returned 1 [0178.121] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\386__Connections_Cellular_Singtel (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\386__connections_cellular_singtel (singapore)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0178.121] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml", cAlternateFileName="387__C~1.PRO")) returned 1 [0178.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\387__connections_cellular_singtel (singapore)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.122] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0178.122] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.123] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.235] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0178.237] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0178.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.240] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.242] CloseHandle (hObject=0x1fc) returned 1 [0178.242] CloseHandle (hObject=0x204) returned 1 [0178.242] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\387__connections_cellular_singtel (singapore)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0178.243] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0178.243] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml", cAlternateFileName="387__C~1.PRO")) returned 0x7d3018 [0178.243] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e0de39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e0de39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e0de39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml", cAlternateFileName="387__C~1.PRO")) returned 0 [0178.243] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0178.243] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\387__connections_cellular_singtel (singapore)_i3$(__mvid)@wap.provxml")) returned 1 [0178.244] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\387__Connections_Cellular_Singtel (Singapore)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\387__connections_cellular_singtel (singapore)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0178.244] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="388__C~1.PRO")) returned 1 [0178.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\388__connections_cellular_starhub (singapore)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.244] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.245] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34f [0178.245] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.245] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.319] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34f, lpOverlapped=0x0) returned 1 [0178.321] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0178.322] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.344] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.355] CloseHandle (hObject=0x204) returned 1 [0178.355] CloseHandle (hObject=0x1fc) returned 1 [0178.355] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\388__connections_cellular_starhub (singapore)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0178.356] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0178.356] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="388__C~1.PRO")) returned 0x7d29d8 [0178.356] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml", cAlternateFileName="388__C~1.PRO")) returned 0 [0178.356] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0178.356] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\388__connections_cellular_starhub (singapore)_i0$(__mvid)@wap.provxml")) returned 1 [0178.358] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\388__Connections_Cellular_Starhub (Singapore)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\388__connections_cellular_starhub (singapore)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0178.358] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="389__C~1.PRO")) returned 1 [0178.358] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\389__connections_cellular_starhub (singapore)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.358] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.359] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34f [0178.359] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.359] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.421] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34f, lpOverlapped=0x0) returned 1 [0178.424] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0178.425] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.447] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.457] CloseHandle (hObject=0x1fc) returned 1 [0178.457] CloseHandle (hObject=0x204) returned 1 [0178.457] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\389__connections_cellular_starhub (singapore)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0178.458] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0178.458] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="389__C~1.PRO")) returned 0x7d3018 [0178.458] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml", cAlternateFileName="389__C~1.PRO")) returned 0 [0178.458] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0178.458] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\389__connections_cellular_starhub (singapore)_i1$(__mvid)@wap.provxml")) returned 1 [0178.459] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\389__Connections_Cellular_Starhub (Singapore)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\389__connections_cellular_starhub (singapore)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0178.459] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x319, dwReserved0=0x0, dwReserved1=0x0, cFileName="38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="38__CO~1.PRO")) returned 1 [0178.459] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\38__connections_cellular_jllc mobile telesystems (belarus)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.461] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.461] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x319 [0178.461] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.461] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.550] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x319, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x319, lpOverlapped=0x0) returned 1 [0178.552] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0178.553] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.578] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.589] CloseHandle (hObject=0x204) returned 1 [0178.589] CloseHandle (hObject=0x1fc) returned 1 [0178.589] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\38__connections_cellular_jllc mobile telesystems (belarus)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0178.590] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0178.590] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x319, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="38__CO~1.PRO")) returned 0x7d2b58 [0178.590] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x319, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="38__CO~1.PRO")) returned 0 [0178.590] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0178.590] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\38__connections_cellular_jllc mobile telesystems (belarus)_i0$(__mvid)@wap.provxml")) returned 1 [0178.591] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\38__Connections_Cellular_JLLC Mobile TeleSystems (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\38__connections_cellular_jllc mobile telesystems (belarus)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0178.591] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml", cAlternateFileName="390__C~1.PRO")) returned 1 [0178.591] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\390__connections_cellular_starhub (singapore)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.592] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.593] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34e [0178.593] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.593] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.685] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34e, lpOverlapped=0x0) returned 1 [0178.741] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0178.742] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.765] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.777] CloseHandle (hObject=0x1fc) returned 1 [0178.777] CloseHandle (hObject=0x204) returned 1 [0178.777] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\390__connections_cellular_starhub (singapore)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0178.778] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0178.778] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml", cAlternateFileName="390__C~1.PRO")) returned 0x7d2b58 [0178.779] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e340a5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e340a5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e340a5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml", cAlternateFileName="390__C~1.PRO")) returned 0 [0178.779] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0178.779] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\390__connections_cellular_starhub (singapore)_i2$(__mvid)@wap.provxml")) returned 1 [0178.780] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\390__Connections_Cellular_Starhub (Singapore)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\390__connections_cellular_starhub (singapore)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0178.780] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="391__C~1.PRO")) returned 1 [0178.780] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\391__connections_cellular_o2 (slovakia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.780] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.781] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x281 [0178.781] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.781] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.844] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x281, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x281, lpOverlapped=0x0) returned 1 [0178.845] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0178.846] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.868] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.878] CloseHandle (hObject=0x204) returned 1 [0178.878] CloseHandle (hObject=0x1fc) returned 1 [0178.878] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\391__connections_cellular_o2 (slovakia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0178.879] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0178.879] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="391__C~1.PRO")) returned 0x7d3098 [0178.879] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="391__C~1.PRO")) returned 0 [0178.879] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0178.879] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\391__connections_cellular_o2 (slovakia)_i0$(__mvid)@wap.provxml")) returned 1 [0178.881] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\391__Connections_Cellular_O2 (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\391__connections_cellular_o2 (slovakia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0178.881] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="392__C~1.PRO")) returned 1 [0178.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\392__connections_cellular_orange (slovakia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.883] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0178.883] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.884] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0178.945] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0178.947] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0178.948] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0178.969] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0178.982] CloseHandle (hObject=0x1fc) returned 1 [0178.982] CloseHandle (hObject=0x204) returned 1 [0178.982] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\392__connections_cellular_orange (slovakia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0178.982] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0178.983] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="392__C~1.PRO")) returned 0x7d2a58 [0178.983] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="392__C~1.PRO")) returned 0 [0178.983] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0178.983] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\392__connections_cellular_orange (slovakia)_i0$(__mvid)@wap.provxml")) returned 1 [0178.984] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\392__Connections_Cellular_Orange (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\392__connections_cellular_orange (slovakia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0178.984] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="393__C~1.PRO")) returned 1 [0178.984] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\393__connections_cellular_slovak telekom (slovakia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0178.984] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0178.985] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0178.985] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0178.985] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0179.078] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0179.080] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0179.081] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0179.136] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.146] CloseHandle (hObject=0x204) returned 1 [0179.146] CloseHandle (hObject=0x1fc) returned 1 [0179.146] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\393__connections_cellular_slovak telekom (slovakia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0179.147] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0179.147] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="393__C~1.PRO")) returned 0x7d2c18 [0179.147] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e5a314, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="393__C~1.PRO")) returned 0 [0179.147] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0179.148] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\393__connections_cellular_slovak telekom (slovakia)_i0$(__mvid)@wap.provxml")) returned 1 [0179.148] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\393__Connections_Cellular_Slovak Telekom (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\393__connections_cellular_slovak telekom (slovakia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0179.149] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="394__C~1.PRO")) returned 1 [0179.149] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\394__connections_cellular_t-mobile (slovakia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0179.149] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0179.150] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0179.150] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0179.150] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0179.215] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0179.217] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0179.218] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0179.240] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.251] CloseHandle (hObject=0x1fc) returned 1 [0179.251] CloseHandle (hObject=0x204) returned 1 [0179.251] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\394__connections_cellular_t-mobile (slovakia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0179.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0179.252] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="394__C~1.PRO")) returned 0x7d3018 [0179.252] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e5a314, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e5a314, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="394__C~1.PRO")) returned 0 [0179.252] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0179.252] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\394__connections_cellular_t-mobile (slovakia)_i0$(__mvid)@wap.provxml")) returned 1 [0179.253] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\394__Connections_Cellular_T-Mobile (Slovakia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\394__connections_cellular_t-mobile (slovakia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0179.253] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="395__C~1.PRO")) returned 1 [0179.253] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\395__connections_cellular_mobitel (slovenia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0179.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0179.254] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0179.254] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0179.254] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0179.314] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0179.315] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0179.317] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0179.341] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.352] CloseHandle (hObject=0x204) returned 1 [0179.352] CloseHandle (hObject=0x1fc) returned 1 [0179.352] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\395__connections_cellular_mobitel (slovenia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0179.353] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0179.353] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="395__C~1.PRO")) returned 0x7d2ad8 [0179.353] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="395__C~1.PRO")) returned 0 [0179.353] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0179.353] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\395__connections_cellular_mobitel (slovenia)_i0$(__mvid)@wap.provxml")) returned 1 [0179.354] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\395__Connections_Cellular_Mobitel (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\395__connections_cellular_mobitel (slovenia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0179.354] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="396__C~1.PRO")) returned 1 [0179.354] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\396__connections_cellular_si.mobil (slovenia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0179.355] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0179.355] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x354 [0179.355] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0179.355] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0179.447] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x354, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x354, lpOverlapped=0x0) returned 1 [0179.629] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0179.630] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0179.661] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.672] CloseHandle (hObject=0x1fc) returned 1 [0179.672] CloseHandle (hObject=0x204) returned 1 [0179.672] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\396__connections_cellular_si.mobil (slovenia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0179.673] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0179.673] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="396__C~1.PRO")) returned 0x7d29d8 [0179.673] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="396__C~1.PRO")) returned 0 [0179.673] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0179.673] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\396__connections_cellular_si.mobil (slovenia)_i0$(__mvid)@wap.provxml")) returned 1 [0179.674] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\396__Connections_Cellular_Si.mobil (Slovenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\396__connections_cellular_si.mobil (slovenia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0179.674] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="397__C~1.PRO")) returned 1 [0179.675] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\397__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0179.675] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0179.675] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0179.675] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0179.676] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0179.892] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0179.893] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0179.894] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0179.926] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0179.936] CloseHandle (hObject=0x204) returned 1 [0179.936] CloseHandle (hObject=0x1fc) returned 1 [0179.937] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\397__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0179.937] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0179.938] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="397__C~1.PRO")) returned 0x7d3018 [0179.938] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="397__C~1.PRO")) returned 0 [0179.938] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0179.938] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\397__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0179.939] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\397__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\397__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0179.939] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="398__C~1.PRO")) returned 1 [0179.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\398__connections_cellular_cell-c (south africa)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0179.940] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0179.940] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0179.940] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0179.940] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.006] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0180.008] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0180.019] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.056] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.066] CloseHandle (hObject=0x1fc) returned 1 [0180.067] CloseHandle (hObject=0x204) returned 1 [0180.067] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\398__connections_cellular_cell-c (south africa)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0180.067] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0180.067] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="398__C~1.PRO")) returned 0x7d2ad8 [0180.067] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90e80580, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90e80580, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90e80580, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="398__C~1.PRO")) returned 0 [0180.068] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0180.068] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\398__connections_cellular_cell-c (south africa)_i0$(__mvid)@wap.provxml")) returned 1 [0180.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\398__Connections_Cellular_Cell-C (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\398__connections_cellular_cell-c (south africa)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0180.069] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x0, cFileName="399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="399__C~1.PRO")) returned 1 [0180.069] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\399__connections_cellular_mtn south africa (south africa)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.070] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.071] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x291 [0180.071] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.072] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.157] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x291, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x291, lpOverlapped=0x0) returned 1 [0180.160] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0180.161] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.183] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.283] CloseHandle (hObject=0x204) returned 1 [0180.283] CloseHandle (hObject=0x1fc) returned 1 [0180.283] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\399__connections_cellular_mtn south africa (south africa)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0180.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0180.284] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="399__C~1.PRO")) returned 0x7d29d8 [0180.284] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="399__C~1.PRO")) returned 0 [0180.284] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0180.284] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\399__connections_cellular_mtn south africa (south africa)_i0$(__mvid)@wap.provxml")) returned 1 [0180.285] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\399__Connections_Cellular_MTN South Africa (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\399__connections_cellular_mtn south africa (south africa)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0180.285] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="39__CO~1.PRO")) returned 1 [0180.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\39__connections_cellular_velcom (belarus)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.286] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0180.286] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.287] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.351] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0180.353] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0180.354] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.439] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.450] CloseHandle (hObject=0x1fc) returned 1 [0180.450] CloseHandle (hObject=0x204) returned 1 [0180.450] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\39__connections_cellular_velcom (belarus)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0180.451] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0180.451] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="39__CO~1.PRO")) returned 0x7d2998 [0180.451] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="39__CO~1.PRO")) returned 0 [0180.452] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0180.452] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\39__connections_cellular_velcom (belarus)_i0$(__mvid)@wap.provxml")) returned 1 [0180.453] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\39__Connections_Cellular_VELCOM (Belarus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\39__connections_cellular_velcom (belarus)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0180.453] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="3__CON~1.PRO")) returned 1 [0180.453] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\3__connections_cellular_wataniya (algeria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.453] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.454] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0180.454] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.454] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.520] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0180.523] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0180.524] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.547] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.559] CloseHandle (hObject=0x204) returned 1 [0180.559] CloseHandle (hObject=0x1fc) returned 1 [0180.559] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\3__connections_cellular_wataniya (algeria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0180.560] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0180.560] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="3__CON~1.PRO")) returned 0x7d29d8 [0180.560] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="3__CON~1.PRO")) returned 0 [0180.560] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0180.560] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\3__connections_cellular_wataniya (algeria)_i0$(__mvid)@wap.provxml")) returned 1 [0180.561] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\3__Connections_Cellular_Wataniya (Algeria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\3__connections_cellular_wataniya (algeria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0180.561] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="400__C~1.PRO")) returned 1 [0180.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\400__connections_cellular_vodacom sa (south africa)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFNBIC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndawx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifnbic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.562] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0180.562] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.562] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.639] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0180.642] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0180.643] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.683] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.743] CloseHandle (hObject=0x1fc) returned 1 [0180.744] CloseHandle (hObject=0x204) returned 1 [0180.744] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\400__connections_cellular_vodacom sa (south africa)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFNBIC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndawx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifnbic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0180.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFNBIC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndawx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifnbic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0180.745] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="400__C~1.PRO")) returned 0x7d2c18 [0180.745] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml", cAlternateFileName="400__C~1.PRO")) returned 0 [0180.745] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0180.745] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\400__connections_cellular_vodacom sa (south africa)_i0$(__mvid)@wap.provxml")) returned 1 [0180.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\400__Connections_Cellular_Vodacom SA (South Africa)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\400__connections_cellular_vodacom sa (south africa)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0180.746] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml", cAlternateFileName="401__C~1.PRO")) returned 1 [0180.746] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\401__connections_cellular_vodacom sa (south africa)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.747] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFNBIC2T33V01CBBZnJpY2EpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda4x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifnbic2t33v01cbbznjpy2epx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.747] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0180.747] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.747] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.826] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0180.828] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0180.829] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.852] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.863] CloseHandle (hObject=0x204) returned 1 [0180.863] CloseHandle (hObject=0x1fc) returned 1 [0180.863] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\401__connections_cellular_vodacom sa (south africa)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFNBIC2T33V01CBBZnJpY2EpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda4x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifnbic2t33v01cbbznjpy2epx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0180.864] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFNBIC2T33V01CBBZnJpY2EpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda4x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifnbic2t33v01cbbznjpy2epx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0180.864] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml", cAlternateFileName="401__C~1.PRO")) returned 0x7d2d58 [0180.864] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml", cAlternateFileName="401__C~1.PRO")) returned 0 [0180.864] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0180.864] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\401__connections_cellular_vodacom sa (south africa)_i1$(__mvid)@wap.provxml")) returned 1 [0180.865] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\401__Connections_Cellular_Vodacom SA (South Africa)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\401__connections_cellular_vodacom sa (south africa)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0180.865] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="402__C~1.PRO")) returned 1 [0180.866] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\402__connections_cellular_movistar (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.866] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAyX19D3256ZWN01W96c19DZW4sdW42cl9N33Zpc3R2ciAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndayx19d3256zwn01w96c19dzw4sdw42cl9n33zpc3r2ciaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.867] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0180.867] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.867] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0180.932] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0180.935] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0180.937] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0180.959] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0180.970] CloseHandle (hObject=0x1fc) returned 1 [0180.970] CloseHandle (hObject=0x204) returned 1 [0180.971] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\402__connections_cellular_movistar (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAyX19D3256ZWN01W96c19DZW4sdW42cl9N33Zpc3R2ciAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndayx19d3256zwn01w96c19dzw4sdw42cl9n33zpc3r2ciaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0180.971] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAyX19D3256ZWN01W96c19DZW4sdW42cl9N33Zpc3R2ciAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndayx19d3256zwn01w96c19dzw4sdw42cl9n33zpc3r2ciaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0180.972] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="402__C~1.PRO")) returned 0x7d2d58 [0180.972] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ea67ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ea67ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ea67ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="402__C~1.PRO")) returned 0 [0180.972] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0180.972] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\402__connections_cellular_movistar (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0180.973] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\402__Connections_Cellular_Movistar (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\402__connections_cellular_movistar (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0180.973] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x0, cFileName="403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml", cAlternateFileName="403__C~1.PRO")) returned 1 [0180.973] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\403__connections_cellular_movistar (spain)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0180.973] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAzX19D3256ZWN01W96c19DZW4sdW42cl9N33Zpc3R2ciAoU3B21W4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndazx19d3256zwn01w96c19dzw4sdw42cl9n33zpc3r2ciaou3b21w4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0180.974] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35a [0180.974] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0180.974] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.060] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35a, lpOverlapped=0x0) returned 1 [0181.063] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0181.064] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.087] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.098] CloseHandle (hObject=0x204) returned 1 [0181.098] CloseHandle (hObject=0x1fc) returned 1 [0181.098] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\403__connections_cellular_movistar (spain)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAzX19D3256ZWN01W96c19DZW4sdW42cl9N33Zpc3R2ciAoU3B21W4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndazx19d3256zwn01w96c19dzw4sdw42cl9n33zpc3r2ciaou3b21w4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0181.099] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDAzX19D3256ZWN01W96c19DZW4sdW42cl9N33Zpc3R2ciAoU3B21W4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndazx19d3256zwn01w96c19dzw4sdw42cl9n33zpc3r2ciaou3b21w4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0181.099] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml", cAlternateFileName="403__C~1.PRO")) returned 0x7d3098 [0181.099] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml", cAlternateFileName="403__C~1.PRO")) returned 0 [0181.099] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0181.099] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\403__connections_cellular_movistar (spain)_i1$(__mvid)@wap.provxml")) returned 1 [0181.100] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\403__Connections_Cellular_Movistar (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\403__connections_cellular_movistar (spain)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0181.102] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="404__C~1.PRO")) returned 1 [0181.102] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\404__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.103] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.103] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x201 [0181.103] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.104] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.169] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x201, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x201, lpOverlapped=0x0) returned 1 [0181.171] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x210, lpOverlapped=0x0) returned 1 [0181.172] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.194] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.206] CloseHandle (hObject=0x1fc) returned 1 [0181.207] CloseHandle (hObject=0x204) returned 1 [0181.207] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\404__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0181.207] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0181.207] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="404__C~1.PRO")) returned 0x7d2c18 [0181.208] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="404__C~1.PRO")) returned 0 [0181.208] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0181.208] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\404__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0181.209] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\404__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\404__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0181.209] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="405__C~1.PRO")) returned 1 [0181.209] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\405__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.209] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.210] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1dc [0181.210] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.211] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.302] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1dc, lpOverlapped=0x0) returned 1 [0181.303] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0181.304] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.327] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.337] CloseHandle (hObject=0x204) returned 1 [0181.337] CloseHandle (hObject=0x1fc) returned 1 [0181.337] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\405__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0181.338] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0181.338] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="405__C~1.PRO")) returned 0x7d29d8 [0181.338] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="405__C~1.PRO")) returned 0 [0181.338] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0181.338] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\405__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0181.339] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\405__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\405__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0181.339] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="406__C~1.PRO")) returned 1 [0181.340] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\406__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.340] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNwYWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnwywl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.340] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x348 [0181.341] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.341] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.403] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x348, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x348, lpOverlapped=0x0) returned 1 [0181.406] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0181.407] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.430] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.441] CloseHandle (hObject=0x1fc) returned 1 [0181.441] CloseHandle (hObject=0x204) returned 1 [0181.441] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\406__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNwYWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnwywl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0181.442] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNwYWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnwywl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0181.442] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="406__C~1.PRO")) returned 0x7d2a98 [0181.442] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="406__C~1.PRO")) returned 0 [0181.442] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0181.442] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\406__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0181.443] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\406__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\406__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0181.443] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="407__C~1.PRO")) returned 1 [0181.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\407__connections_cellular_telefonica (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2TcGFp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2tcgfp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.449] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0181.449] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.450] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.553] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0181.557] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0181.558] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.581] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.745] CloseHandle (hObject=0x204) returned 1 [0181.745] CloseHandle (hObject=0x1fc) returned 1 [0181.745] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\407__connections_cellular_telefonica (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2TcGFp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2tcgfp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0181.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2TcGFp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2tcgfp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0181.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="407__C~1.PRO")) returned 0x7d2998 [0181.746] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ecca53, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ecca53, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ecca53, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="407__C~1.PRO")) returned 0 [0181.747] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0181.747] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\407__connections_cellular_telefonica (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0181.748] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\407__Connections_Cellular_Telefonica (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\407__connections_cellular_telefonica (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0181.748] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="408__C~1.PRO")) returned 1 [0181.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\408__connections_cellular_vodafone es (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA4X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda4x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.749] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x356 [0181.749] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.749] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.815] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x356, lpOverlapped=0x0) returned 1 [0181.817] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0181.818] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.841] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.852] CloseHandle (hObject=0x1fc) returned 1 [0181.852] CloseHandle (hObject=0x204) returned 1 [0181.852] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\408__connections_cellular_vodafone es (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA4X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda4x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0181.853] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA4X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda4x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0181.853] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="408__C~1.PRO")) returned 0x7d2ad8 [0181.853] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="408__C~1.PRO")) returned 0 [0181.853] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0181.853] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\408__connections_cellular_vodafone es (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0181.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\408__Connections_Cellular_vodafone ES (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\408__connections_cellular_vodafone es (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0181.854] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml", cAlternateFileName="409__C~1.PRO")) returned 1 [0181.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\409__connections_cellular_vodafone es (spain)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA5X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda5x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.856] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x352 [0181.856] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.857] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0181.915] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x352, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x352, lpOverlapped=0x0) returned 1 [0181.917] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0181.918] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0181.941] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0181.952] CloseHandle (hObject=0x204) returned 1 [0181.952] CloseHandle (hObject=0x1fc) returned 1 [0181.953] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\409__connections_cellular_vodafone es (spain)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA5X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda5x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0181.953] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDA5X19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nda5x19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0181.953] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml", cAlternateFileName="409__C~1.PRO")) returned 0x7d2c98 [0181.954] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml", cAlternateFileName="409__C~1.PRO")) returned 0 [0181.954] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0181.954] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\409__connections_cellular_vodafone es (spain)_i1$(__mvid)@wap.provxml")) returned 1 [0181.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\409__Connections_Cellular_vodafone ES (Spain)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\409__connections_cellular_vodafone es (spain)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0181.955] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml", cAlternateFileName="40__CO~1.PRO")) returned 1 [0181.955] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\40__connections_cellular_velcom (belarus)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0181.955] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndbfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0181.956] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0181.956] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0181.956] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.024] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0182.057] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0182.058] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.080] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.093] CloseHandle (hObject=0x1fc) returned 1 [0182.093] CloseHandle (hObject=0x204) returned 1 [0182.093] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\40__connections_cellular_velcom (belarus)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndbfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0182.094] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndbfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0182.094] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml", cAlternateFileName="40__CO~1.PRO")) returned 0x7d2a58 [0182.094] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml", cAlternateFileName="40__CO~1.PRO")) returned 0 [0182.094] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0182.094] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\40__connections_cellular_velcom (belarus)_i1$(__mvid)@wap.provxml")) returned 1 [0182.095] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\40__Connections_Cellular_VELCOM (Belarus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\40__connections_cellular_velcom (belarus)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0182.095] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml", cAlternateFileName="410__C~1.PRO")) returned 1 [0182.095] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\410__connections_cellular_vodafone es (spain)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.095] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEwX19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndewx19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.096] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x352 [0182.096] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.096] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.183] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x352, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x352, lpOverlapped=0x0) returned 1 [0182.184] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0182.185] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.210] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.220] CloseHandle (hObject=0x204) returned 1 [0182.221] CloseHandle (hObject=0x1fc) returned 1 [0182.221] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\410__connections_cellular_vodafone es (spain)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEwX19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndewx19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0182.222] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEwX19D3256ZWN01W96c19DZW4sdW42cl9232R2Zm96ZSBFUyAoU3B21W4pX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndewx19d3256zwn01w96c19dzw4sdw42cl9232r2zm96zsbfuyaou3b21w4px25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0182.222] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml", cAlternateFileName="410__C~1.PRO")) returned 0x7d2c58 [0182.222] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml", cAlternateFileName="410__C~1.PRO")) returned 0 [0182.222] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0182.222] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\410__connections_cellular_vodafone es (spain)_i2$(__mvid)@wap.provxml")) returned 1 [0182.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\410__Connections_Cellular_vodafone ES (Spain)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\410__connections_cellular_vodafone es (spain)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0182.223] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="411__C~1.PRO")) returned 1 [0182.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\411__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.224] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0182.224] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.225] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.320] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0182.321] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0182.322] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.346] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.356] CloseHandle (hObject=0x1fc) returned 1 [0182.356] CloseHandle (hObject=0x204) returned 1 [0182.357] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\411__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0182.358] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0182.358] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="411__C~1.PRO")) returned 0x7d3018 [0182.358] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ef2cc3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ef2cc3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ef2cc3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="411__C~1.PRO")) returned 0 [0182.358] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0182.358] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\411__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0182.359] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\411__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\411__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0182.359] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="412__C~1.PRO")) returned 1 [0182.359] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\412__connections_cellular_yoigo (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.359] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEyX19D3256ZWN01W96c19DZW4sdW42cl9Z32ln3yAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndeyx19d3256zwn01w96c19dzw4sdw42cl9z32ln3yaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.360] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0182.360] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.360] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.424] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0182.432] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0182.433] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.455] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.489] CloseHandle (hObject=0x204) returned 1 [0182.489] CloseHandle (hObject=0x1fc) returned 1 [0182.489] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\412__connections_cellular_yoigo (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEyX19D3256ZWN01W96c19DZW4sdW42cl9Z32ln3yAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndeyx19d3256zwn01w96c19dzw4sdw42cl9z32ln3yaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0182.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEyX19D3256ZWN01W96c19DZW4sdW42cl9Z32ln3yAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndeyx19d3256zwn01w96c19dzw4sdw42cl9z32ln3yaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0182.490] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="412__C~1.PRO")) returned 0x7d2c18 [0182.490] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="412__C~1.PRO")) returned 0 [0182.490] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0182.490] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\412__connections_cellular_yoigo (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0182.491] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\412__Connections_Cellular_Yoigo (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\412__connections_cellular_yoigo (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0182.491] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml", cAlternateFileName="413__C~1.PRO")) returned 1 [0182.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\413__connections_cellular_dialog (sri lanka)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.492] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEzX19D3256ZWN01W96c19DZW4sdW42cl9ESUFMT0cgKFNy1SBMYW5rYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndezx19d3256zwn01w96c19dzw4sdw42cl9esufmt0cgkfny1sbmyw5ryslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.492] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0182.492] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.558] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0182.560] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0182.561] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.584] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.595] CloseHandle (hObject=0x1fc) returned 1 [0182.595] CloseHandle (hObject=0x204) returned 1 [0182.595] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\413__connections_cellular_dialog (sri lanka)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEzX19D3256ZWN01W96c19DZW4sdW42cl9ESUFMT0cgKFNy1SBMYW5rYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndezx19d3256zwn01w96c19dzw4sdw42cl9esufmt0cgkfny1sbmyw5ryslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0182.596] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDEzX19D3256ZWN01W96c19DZW4sdW42cl9ESUFMT0cgKFNy1SBMYW5rYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndezx19d3256zwn01w96c19dzw4sdw42cl9esufmt0cgkfny1sbmyw5ryslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0182.596] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml", cAlternateFileName="413__C~1.PRO")) returned 0x7d3018 [0182.596] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml", cAlternateFileName="413__C~1.PRO")) returned 0 [0182.596] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0182.596] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\413__connections_cellular_dialog (sri lanka)_i0$(__mvid)@wap.provxml")) returned 1 [0182.597] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\413__Connections_Cellular_DIALOG (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\413__connections_cellular_dialog (sri lanka)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0182.597] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml", cAlternateFileName="414__C~1.PRO")) returned 1 [0182.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\414__connections_cellular_dialog (sri lanka)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE0X19D3256ZWN01W96c19DZW4sdW42cl9ESUFMT0cgKFNy1SBMYW5rYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde0x19d3256zwn01w96c19dzw4sdw42cl9esufmt0cgkfny1sbmyw5ryslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.598] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0182.598] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.599] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.731] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0182.733] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0182.734] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.762] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.773] CloseHandle (hObject=0x204) returned 1 [0182.773] CloseHandle (hObject=0x1fc) returned 1 [0182.773] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\414__connections_cellular_dialog (sri lanka)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE0X19D3256ZWN01W96c19DZW4sdW42cl9ESUFMT0cgKFNy1SBMYW5rYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde0x19d3256zwn01w96c19dzw4sdw42cl9esufmt0cgkfny1sbmyw5ryslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0182.774] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE0X19D3256ZWN01W96c19DZW4sdW42cl9ESUFMT0cgKFNy1SBMYW5rYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde0x19d3256zwn01w96c19dzw4sdw42cl9esufmt0cgkfny1sbmyw5ryslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0182.774] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml", cAlternateFileName="414__C~1.PRO")) returned 0x7d2c98 [0182.774] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml", cAlternateFileName="414__C~1.PRO")) returned 0 [0182.775] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0182.775] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\414__connections_cellular_dialog (sri lanka)_i1$(__mvid)@wap.provxml")) returned 1 [0182.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\414__Connections_Cellular_DIALOG (Sri Lanka)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\414__connections_cellular_dialog (sri lanka)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0182.776] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml", cAlternateFileName="415__C~1.PRO")) returned 1 [0182.776] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\415__connections_cellular_mobitel (sri lanka)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.824] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE1X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2Tcm5gTGF612EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde1x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2tcm5gtgf612epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.825] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x280 [0182.825] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.825] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0182.890] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0182.892] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0182.893] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0182.916] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0182.927] CloseHandle (hObject=0x1fc) returned 1 [0182.927] CloseHandle (hObject=0x204) returned 1 [0182.927] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\415__connections_cellular_mobitel (sri lanka)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE1X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2Tcm5gTGF612EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde1x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2tcm5gtgf612epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0182.928] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE1X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2Tcm5gTGF612EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde1x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2tcm5gtgf612epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0182.928] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml", cAlternateFileName="415__C~1.PRO")) returned 0x7d2d58 [0182.928] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml", cAlternateFileName="415__C~1.PRO")) returned 0 [0182.928] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0182.928] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\415__connections_cellular_mobitel (sri lanka)_i0$(__mvid)@wap.provxml")) returned 1 [0182.929] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\415__Connections_Cellular_Mobitel (Sri Lanka)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\415__connections_cellular_mobitel (sri lanka)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0182.929] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="416__C~1.PRO")) returned 1 [0182.929] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\416__connections_cellular_zain (sudan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0182.930] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE2X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2TdWR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde2x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2tdwr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0182.930] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27e [0182.930] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0182.930] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.031] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27e, lpOverlapped=0x0) returned 1 [0183.032] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0183.033] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.056] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.069] CloseHandle (hObject=0x204) returned 1 [0183.069] CloseHandle (hObject=0x1fc) returned 1 [0183.069] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\416__connections_cellular_zain (sudan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE2X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2TdWR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde2x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2tdwr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0183.070] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE2X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2TdWR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde2x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2tdwr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0183.070] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="416__C~1.PRO")) returned 0x7d2cd8 [0183.070] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f18f32, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f18f32, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f18f32, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="416__C~1.PRO")) returned 0 [0183.070] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0183.070] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\416__connections_cellular_zain (sudan)_i0$(__mvid)@wap.provxml")) returned 1 [0183.071] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\416__Connections_Cellular_Zain (Sudan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\416__connections_cellular_zain (sudan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0183.072] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="417__C~1.PRO")) returned 1 [0183.072] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\417__connections_cellular_halebop (sweden)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.072] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE3X19D3256ZWN01W96c19DZW4sdW42cl9IYW4lYm9wIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde3x19d3256zwn01w96c19dzw4sdw42cl9iyw4lym9wic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.073] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0183.073] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.073] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.139] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0183.142] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0183.143] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.165] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.176] CloseHandle (hObject=0x1fc) returned 1 [0183.176] CloseHandle (hObject=0x204) returned 1 [0183.176] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\417__connections_cellular_halebop (sweden)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE3X19D3256ZWN01W96c19DZW4sdW42cl9IYW4lYm9wIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde3x19d3256zwn01w96c19dzw4sdw42cl9iyw4lym9wic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0183.177] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE3X19D3256ZWN01W96c19DZW4sdW42cl9IYW4lYm9wIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde3x19d3256zwn01w96c19dzw4sdw42cl9iyw4lym9wic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0183.177] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="417__C~1.PRO")) returned 0x7d2cd8 [0183.177] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="417__C~1.PRO")) returned 0 [0183.177] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0183.178] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\417__connections_cellular_halebop (sweden)_i0$(__mvid)@wap.provxml")) returned 1 [0183.179] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\417__Connections_Cellular_Halebop (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\417__connections_cellular_halebop (sweden)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0183.179] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="418__C~1.PRO")) returned 1 [0183.179] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\418__connections_cellular_3 (sweden)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.179] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde4x19d3256zwn01w96c19dzw4sdw42cl8zic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.180] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0183.180] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.180] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.246] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0183.248] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0183.249] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.271] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.283] CloseHandle (hObject=0x204) returned 1 [0183.283] CloseHandle (hObject=0x1fc) returned 1 [0183.283] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\418__connections_cellular_3 (sweden)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde4x19d3256zwn01w96c19dzw4sdw42cl8zic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0183.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde4x19d3256zwn01w96c19dzw4sdw42cl8zic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0183.284] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="418__C~1.PRO")) returned 0x7d3018 [0183.284] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="418__C~1.PRO")) returned 0 [0183.285] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0183.285] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\418__connections_cellular_3 (sweden)_i0$(__mvid)@wap.provxml")) returned 1 [0183.286] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\418__Connections_Cellular_3 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\418__connections_cellular_3 (sweden)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0183.286] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml", cAlternateFileName="419__C~1.PRO")) returned 1 [0183.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\419__connections_cellular_3 (sweden)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.286] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2Td2V5ZW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde5x19d3256zwn01w96c19dzw4sdw42cl8zic2td2v5zw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.287] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0183.287] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.287] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.384] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0183.386] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0183.387] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.410] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.421] CloseHandle (hObject=0x1fc) returned 1 [0183.421] CloseHandle (hObject=0x204) returned 1 [0183.421] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\419__connections_cellular_3 (sweden)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2Td2V5ZW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde5x19d3256zwn01w96c19dzw4sdw42cl8zic2td2v5zw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0183.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDE5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2Td2V5ZW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nde5x19d3256zwn01w96c19dzw4sdw42cl8zic2td2v5zw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0183.431] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml", cAlternateFileName="419__C~1.PRO")) returned 0x7d3018 [0183.431] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml", cAlternateFileName="419__C~1.PRO")) returned 0 [0183.431] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0183.431] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\419__connections_cellular_3 (sweden)_i1$(__mvid)@wap.provxml")) returned 1 [0183.432] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\419__Connections_Cellular_3 (Sweden)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\419__connections_cellular_3 (sweden)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0183.432] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml", cAlternateFileName="41__CO~1.PRO")) returned 1 [0183.433] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\41__connections_cellular_velcom (belarus)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.433] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndffx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.434] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0183.434] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.434] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.502] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0183.504] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0183.505] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.527] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.538] CloseHandle (hObject=0x204) returned 1 [0183.538] CloseHandle (hObject=0x1fc) returned 1 [0183.538] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\41__connections_cellular_velcom (belarus)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndffx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0183.539] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndffx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0183.539] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml", cAlternateFileName="41__CO~1.PRO")) returned 0x7d2998 [0183.539] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90221ca6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90221ca6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90221ca6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml", cAlternateFileName="41__CO~1.PRO")) returned 0 [0183.539] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0183.539] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\41__connections_cellular_velcom (belarus)_i2$(__mvid)@wap.provxml")) returned 1 [0183.540] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\41__Connections_Cellular_VELCOM (Belarus)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\41__connections_cellular_velcom (belarus)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0183.540] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="420__C~1.PRO")) returned 1 [0183.540] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\420__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.540] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndiwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.541] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1de [0183.541] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.541] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.645] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1de, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1de, lpOverlapped=0x0) returned 1 [0183.646] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0183.647] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.680] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.742] CloseHandle (hObject=0x1fc) returned 1 [0183.742] CloseHandle (hObject=0x204) returned 1 [0183.742] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\420__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndiwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0183.743] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndiwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0183.743] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="420__C~1.PRO")) returned 0x7d3018 [0183.743] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1de, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="420__C~1.PRO")) returned 0 [0183.744] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0183.744] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\420__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0183.745] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\420__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\420__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0183.745] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="421__C~1.PRO")) returned 1 [0183.745] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\421__connections_cellular_tdc sweden (sweden)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.745] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgU3dlZGV6IC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi4x19d3256zwn01w96c19dzw4sdw42cl9uremgu3dlzgv6ic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.746] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0183.746] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.746] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.814] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0183.882] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0183.883] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0183.906] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0183.917] CloseHandle (hObject=0x204) returned 1 [0183.917] CloseHandle (hObject=0x1fc) returned 1 [0183.918] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\421__connections_cellular_tdc sweden (sweden)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgU3dlZGV6IC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi4x19d3256zwn01w96c19dzw4sdw42cl9uremgu3dlzgv6ic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0183.919] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgU3dlZGV6IC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi4x19d3256zwn01w96c19dzw4sdw42cl9uremgu3dlzgv6ic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0183.919] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="421__C~1.PRO")) returned 0x7d2918 [0183.919] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f3f19a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f3f19a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f3f19a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="421__C~1.PRO")) returned 0 [0183.919] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0183.919] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\421__connections_cellular_tdc sweden (sweden)_i0$(__mvid)@wap.provxml")) returned 1 [0183.921] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\421__Connections_Cellular_TDC Sweden (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\421__connections_cellular_tdc sweden (sweden)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0183.921] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="422__C~1.PRO")) returned 1 [0183.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\422__connections_cellular_tele2 (sweden)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0183.923] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoU3dlZGV6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndiyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaou3dlzgv6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0183.923] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0183.923] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0183.924] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0183.998] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0184.003] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0184.004] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.027] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.037] CloseHandle (hObject=0x1fc) returned 1 [0184.037] CloseHandle (hObject=0x204) returned 1 [0184.037] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\422__connections_cellular_tele2 (sweden)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoU3dlZGV6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndiyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaou3dlzgv6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0184.038] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoU3dlZGV6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndiyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaou3dlzgv6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0184.038] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="422__C~1.PRO")) returned 0x7d2d58 [0184.038] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="422__C~1.PRO")) returned 0 [0184.038] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0184.038] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\422__connections_cellular_tele2 (sweden)_i0$(__mvid)@wap.provxml")) returned 1 [0184.039] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\422__Connections_Cellular_Tele2 (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\422__connections_cellular_tele2 (sweden)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.039] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28d, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="423__C~1.PRO")) returned 1 [0184.042] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\423__connections_cellular_telenor (sweden)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.042] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIzX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndizx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.043] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28d [0184.043] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.043] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.121] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28d, lpOverlapped=0x0) returned 1 [0184.123] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0184.124] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.145] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.157] CloseHandle (hObject=0x204) returned 1 [0184.157] CloseHandle (hObject=0x1fc) returned 1 [0184.157] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\423__connections_cellular_telenor (sweden)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIzX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndizx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0184.158] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDIzX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2Td2V5ZW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndizx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2td2v5zw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0184.158] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="423__C~1.PRO")) returned 0x7d3018 [0184.158] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="423__C~1.PRO")) returned 0 [0184.158] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0184.158] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\423__connections_cellular_telenor (sweden)_i0$(__mvid)@wap.provxml")) returned 1 [0184.159] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\423__Connections_Cellular_Telenor (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\423__connections_cellular_telenor (sweden)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.159] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="424__C~1.PRO")) returned 1 [0184.160] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\424__connections_cellular_telia (sweden)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.160] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSAoU3dlZGV6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4pysaou3dlzgv6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.160] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x287 [0184.160] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.161] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.253] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x287, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x287, lpOverlapped=0x0) returned 1 [0184.269] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0184.270] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.292] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.303] CloseHandle (hObject=0x1fc) returned 1 [0184.303] CloseHandle (hObject=0x204) returned 1 [0184.304] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\424__connections_cellular_telia (sweden)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSAoU3dlZGV6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4pysaou3dlzgv6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0184.304] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSAoU3dlZGV6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4pysaou3dlzgv6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0184.304] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="424__C~1.PRO")) returned 0x7d2c58 [0184.305] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f65464, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f65464, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f65464, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml", cAlternateFileName="424__C~1.PRO")) returned 0 [0184.305] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0184.305] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\424__connections_cellular_telia (sweden)_i0$(__mvid)@wap.provxml")) returned 1 [0184.306] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\424__Connections_Cellular_Telia (Sweden)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\424__connections_cellular_telia (sweden)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.306] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="425__C~1.PRO")) returned 1 [0184.306] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\425__connections_cellular_orange (switzerland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.306] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFN31XR6ZXJsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfn31xr6zxjsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.307] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0184.307] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.307] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.371] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0184.372] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0184.373] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.395] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.406] CloseHandle (hObject=0x204) returned 1 [0184.406] CloseHandle (hObject=0x1fc) returned 1 [0184.406] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\425__connections_cellular_orange (switzerland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFN31XR6ZXJsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfn31xr6zxjsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0184.407] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFN31XR6ZXJsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfn31xr6zxjsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0184.407] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="425__C~1.PRO")) returned 0x7d2998 [0184.407] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="425__C~1.PRO")) returned 0 [0184.407] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0184.407] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\425__connections_cellular_orange (switzerland)_i0$(__mvid)@wap.provxml")) returned 1 [0184.408] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\425__Connections_Cellular_Orange (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\425__connections_cellular_orange (switzerland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.408] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="426__C~1.PRO")) returned 1 [0184.408] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\426__connections_cellular_orange (switzerland)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.408] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFN31XR6ZXJsYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfn31xr6zxjsyw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.409] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0184.409] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.409] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.472] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0184.473] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0184.474] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.495] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.505] CloseHandle (hObject=0x1fc) returned 1 [0184.505] CloseHandle (hObject=0x204) returned 1 [0184.506] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\426__connections_cellular_orange (switzerland)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFN31XR6ZXJsYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfn31xr6zxjsyw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0184.506] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFN31XR6ZXJsYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfn31xr6zxjsyw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0184.506] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="426__C~1.PRO")) returned 0x7d2c98 [0184.506] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="426__C~1.PRO")) returned 0 [0184.507] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0184.507] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\426__connections_cellular_orange (switzerland)_i1$(__mvid)@wap.provxml")) returned 1 [0184.508] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\426__Connections_Cellular_Orange (Switzerland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\426__connections_cellular_orange (switzerland)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0184.508] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="427__C~1.PRO")) returned 1 [0184.508] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\427__connections_cellular_sunrise (switzerland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.508] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI3X19D3256ZWN01W96c19DZW4sdW42cl9TdW5y1XNlIC2Td2l07mVy3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi3x19d3256zwn01w96c19dzw4sdw42cl9tdw5y1xnlic2td2l07mvy3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.508] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x287 [0184.508] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.509] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.604] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x287, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x287, lpOverlapped=0x0) returned 1 [0184.660] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0184.661] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.714] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.725] CloseHandle (hObject=0x204) returned 1 [0184.725] CloseHandle (hObject=0x1fc) returned 1 [0184.725] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\427__connections_cellular_sunrise (switzerland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI3X19D3256ZWN01W96c19DZW4sdW42cl9TdW5y1XNlIC2Td2l07mVy3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi3x19d3256zwn01w96c19dzw4sdw42cl9tdw5y1xnlic2td2l07mvy3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0184.726] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI3X19D3256ZWN01W96c19DZW4sdW42cl9TdW5y1XNlIC2Td2l07mVy3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi3x19d3256zwn01w96c19dzw4sdw42cl9tdw5y1xnlic2td2l07mvy3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0184.726] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="427__C~1.PRO")) returned 0x7d2d58 [0184.726] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="427__C~1.PRO")) returned 0 [0184.726] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0184.726] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\427__connections_cellular_sunrise (switzerland)_i0$(__mvid)@wap.provxml")) returned 1 [0184.727] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\427__Connections_Cellular_Sunrise (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\427__connections_cellular_sunrise (switzerland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.727] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="428__C~1.PRO")) returned 1 [0184.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\428__connections_cellular_swisscom (switzerland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI4X19D3256ZWN01W96c19DZW4sdW42cl9Td2lzc2Nv3SAoU3dpdHplcm423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi4x19d3256zwn01w96c19dzw4sdw42cl9td2lzc2nv3saou3dpdhplcm423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.728] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0184.728] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.729] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.806] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0184.808] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0184.809] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.832] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.843] CloseHandle (hObject=0x1fc) returned 1 [0184.843] CloseHandle (hObject=0x204) returned 1 [0184.843] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\428__connections_cellular_swisscom (switzerland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI4X19D3256ZWN01W96c19DZW4sdW42cl9Td2lzc2Nv3SAoU3dpdHplcm423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi4x19d3256zwn01w96c19dzw4sdw42cl9td2lzc2nv3saou3dpdhplcm423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0184.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI4X19D3256ZWN01W96c19DZW4sdW42cl9Td2lzc2Nv3SAoU3dpdHplcm423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi4x19d3256zwn01w96c19dzw4sdw42cl9td2lzc2nv3saou3dpdhplcm423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0184.844] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="428__C~1.PRO")) returned 0x7d3018 [0184.844] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="428__C~1.PRO")) returned 0 [0184.844] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0184.845] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\428__connections_cellular_swisscom (switzerland)_i0$(__mvid)@wap.provxml")) returned 1 [0184.846] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\428__Connections_Cellular_Swisscom (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\428__connections_cellular_swisscom (switzerland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.846] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="429__C~1.PRO")) returned 1 [0184.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\429__connections_cellular_tele2 (switzerland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoU3dpdHplcm423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaou3dpdhplcm423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.847] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0184.847] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.848] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0184.913] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0184.920] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0184.922] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0184.944] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0184.955] CloseHandle (hObject=0x204) returned 1 [0184.955] CloseHandle (hObject=0x1fc) returned 1 [0184.955] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\429__connections_cellular_tele2 (switzerland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoU3dpdHplcm423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaou3dpdhplcm423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0184.956] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDI5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoU3dpdHplcm423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndi5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaou3dpdhplcm423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0184.956] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="429__C~1.PRO")) returned 0x7d3018 [0184.956] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90f8b671, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90f8b671, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90f8b671, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="429__C~1.PRO")) returned 0 [0184.956] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0184.956] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\429__connections_cellular_tele2 (switzerland)_i0$(__mvid)@wap.provxml")) returned 1 [0184.957] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\429__Connections_Cellular_Tele2 (Switzerland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\429__connections_cellular_tele2 (switzerland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0184.957] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml", cAlternateFileName="42__CO~1.PRO")) returned 1 [0184.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\42__connections_cellular_velcom (belarus)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0184.958] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndjfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0184.958] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x352 [0184.958] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0184.959] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.046] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x352, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x352, lpOverlapped=0x0) returned 1 [0185.049] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0185.050] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.073] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.084] CloseHandle (hObject=0x1fc) returned 1 [0185.084] CloseHandle (hObject=0x204) returned 1 [0185.084] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\42__connections_cellular_velcom (belarus)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndjfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0185.085] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndjfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0185.085] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml", cAlternateFileName="42__CO~1.PRO")) returned 0x7d2d58 [0185.085] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml", cAlternateFileName="42__CO~1.PRO")) returned 0 [0185.085] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0185.085] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\42__connections_cellular_velcom (belarus)_i3$(__mvid)@wap.provxml")) returned 1 [0185.086] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\42__Connections_Cellular_VELCOM (Belarus)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\42__connections_cellular_velcom (belarus)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0185.086] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="430__C~1.PRO")) returned 1 [0185.087] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\430__connections_cellular_mtn (syria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.087] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMwX19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKFN5cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmwx19d3256zwn01w96c19dzw4sdw42cl9nve4gkfn5cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.087] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27d [0185.087] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.088] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.200] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27d, lpOverlapped=0x0) returned 1 [0185.202] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0185.203] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.225] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.237] CloseHandle (hObject=0x204) returned 1 [0185.237] CloseHandle (hObject=0x1fc) returned 1 [0185.237] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\430__connections_cellular_mtn (syria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMwX19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKFN5cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmwx19d3256zwn01w96c19dzw4sdw42cl9nve4gkfn5cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0185.238] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMwX19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKFN5cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmwx19d3256zwn01w96c19dzw4sdw42cl9nve4gkfn5cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0185.238] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="430__C~1.PRO")) returned 0x7d2b58 [0185.239] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="430__C~1.PRO")) returned 0 [0185.239] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0185.239] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\430__connections_cellular_mtn (syria)_i0$(__mvid)@wap.provxml")) returned 1 [0185.240] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\430__Connections_Cellular_MTN (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\430__connections_cellular_mtn (syria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0185.240] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="431__C~1.PRO")) returned 1 [0185.240] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\431__connections_cellular_syriatel (syria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.240] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM4X19D3256ZWN01W96c19DZW4sdW42cl9T7XJpYVRl3CAoU3ly1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm4x19d3256zwn01w96c19dzw4sdw42cl9t7xjpyvrl3caou3ly1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.241] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0185.241] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.241] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.336] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0185.337] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0185.338] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.367] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.383] CloseHandle (hObject=0x1fc) returned 1 [0185.384] CloseHandle (hObject=0x204) returned 1 [0185.384] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\431__connections_cellular_syriatel (syria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM4X19D3256ZWN01W96c19DZW4sdW42cl9T7XJpYVRl3CAoU3ly1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm4x19d3256zwn01w96c19dzw4sdw42cl9t7xjpyvrl3caou3ly1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0185.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM4X19D3256ZWN01W96c19DZW4sdW42cl9T7XJpYVRl3CAoU3ly1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm4x19d3256zwn01w96c19dzw4sdw42cl9t7xjpyvrl3caou3ly1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0185.385] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="431__C~1.PRO")) returned 0x7d3018 [0185.385] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="431__C~1.PRO")) returned 0 [0185.385] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0185.385] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\431__connections_cellular_syriatel (syria)_i0$(__mvid)@wap.provxml")) returned 1 [0185.386] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\431__Connections_Cellular_SyriaTel (Syria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\431__connections_cellular_syriatel (syria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0185.386] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="432__C~1.PRO")) returned 1 [0185.387] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\432__connections_cellular_chunghwa (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.387] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMyX19D3256ZWN01W96c19DZW4sdW42cl9D1HV6Z223YSAoVGFpd2F6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmyx19d3256zwn01w96c19dzw4sdw42cl9d1hv6z223ysaovgfpd2f6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.387] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0185.387] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.388] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.452] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0185.454] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0185.455] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.477] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.488] CloseHandle (hObject=0x204) returned 1 [0185.488] CloseHandle (hObject=0x1fc) returned 1 [0185.488] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\432__connections_cellular_chunghwa (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMyX19D3256ZWN01W96c19DZW4sdW42cl9D1HV6Z223YSAoVGFpd2F6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmyx19d3256zwn01w96c19dzw4sdw42cl9d1hv6z223ysaovgfpd2f6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0185.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMyX19D3256ZWN01W96c19DZW4sdW42cl9D1HV6Z223YSAoVGFpd2F6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmyx19d3256zwn01w96c19dzw4sdw42cl9d1hv6z223ysaovgfpd2f6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0185.489] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="432__C~1.PRO")) returned 0x7d3018 [0185.489] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="432__C~1.PRO")) returned 0 [0185.489] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0185.489] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\432__connections_cellular_chunghwa (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0185.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\432__Connections_Cellular_Chunghwa (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\432__connections_cellular_chunghwa (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0185.490] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x0, cFileName="433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="433__C~1.PRO")) returned 1 [0185.490] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\433__connections_cellular_chunghwa (taiwan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMzX19D3256ZWN01W96c19DZW4sdW42cl9D1HV6Z223YSAoVGFpd2F6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmzx19d3256zwn01w96c19dzw4sdw42cl9d1hv6z223ysaovgfpd2f6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.492] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x344 [0185.492] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.561] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x344, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x344, lpOverlapped=0x0) returned 1 [0185.564] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0185.565] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.587] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.598] CloseHandle (hObject=0x1fc) returned 1 [0185.599] CloseHandle (hObject=0x204) returned 1 [0185.599] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\433__connections_cellular_chunghwa (taiwan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMzX19D3256ZWN01W96c19DZW4sdW42cl9D1HV6Z223YSAoVGFpd2F6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmzx19d3256zwn01w96c19dzw4sdw42cl9d1hv6z223ysaovgfpd2f6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0185.600] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDMzX19D3256ZWN01W96c19DZW4sdW42cl9D1HV6Z223YSAoVGFpd2F6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndmzx19d3256zwn01w96c19dzw4sdw42cl9d1hv6z223ysaovgfpd2f6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0185.600] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="433__C~1.PRO")) returned 0x7d2c18 [0185.600] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fb18e0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fb18e0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fb18e0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="433__C~1.PRO")) returned 0 [0185.600] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0185.600] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\433__connections_cellular_chunghwa (taiwan)_i1$(__mvid)@wap.provxml")) returned 1 [0185.601] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\433__Connections_Cellular_Chunghwa (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\433__connections_cellular_chunghwa (taiwan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0185.601] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="434__C~1.PRO")) returned 1 [0185.601] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\434__connections_cellular_mobitai (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.602] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM0X19D3256ZWN01W96c19DZW4sdW42cl9N30JpVGFpIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm0x19d3256zwn01w96c19dzw4sdw42cl9n30jpvgfpic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.602] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27f [0185.602] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.603] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.737] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27f, lpOverlapped=0x0) returned 1 [0185.738] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0185.739] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.764] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.774] CloseHandle (hObject=0x204) returned 1 [0185.774] CloseHandle (hObject=0x1fc) returned 1 [0185.775] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\434__connections_cellular_mobitai (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM0X19D3256ZWN01W96c19DZW4sdW42cl9N30JpVGFpIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm0x19d3256zwn01w96c19dzw4sdw42cl9n30jpvgfpic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0185.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM0X19D3256ZWN01W96c19DZW4sdW42cl9N30JpVGFpIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm0x19d3256zwn01w96c19dzw4sdw42cl9n30jpvgfpic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0185.776] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="434__C~1.PRO")) returned 0x7d3098 [0185.776] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="434__C~1.PRO")) returned 0 [0185.776] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0185.776] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\434__connections_cellular_mobitai (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0185.777] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\434__Connections_Cellular_MoBiTai (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\434__connections_cellular_mobitai (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0185.777] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="435__C~1.PRO")) returned 1 [0185.777] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\435__connections_cellular_taiwan mobile (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM1X19D3256ZWN01W96c19DZW4sdW42cl9UYWl3YW4gTW9i1W4lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm1x19d3256zwn01w96c19dzw4sdw42cl9uywl3yw4gtw9i1w4lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.778] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0185.778] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.779] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.843] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0185.845] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0185.845] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.868] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0185.879] CloseHandle (hObject=0x1fc) returned 1 [0185.879] CloseHandle (hObject=0x204) returned 1 [0185.879] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\435__connections_cellular_taiwan mobile (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM1X19D3256ZWN01W96c19DZW4sdW42cl9UYWl3YW4gTW9i1W4lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm1x19d3256zwn01w96c19dzw4sdw42cl9uywl3yw4gtw9i1w4lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0185.880] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM1X19D3256ZWN01W96c19DZW4sdW42cl9UYWl3YW4gTW9i1W4lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm1x19d3256zwn01w96c19dzw4sdw42cl9uywl3yw4gtw9i1w4lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0185.880] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="435__C~1.PRO")) returned 0x7d3018 [0185.880] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="435__C~1.PRO")) returned 0 [0185.880] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0185.880] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\435__connections_cellular_taiwan mobile (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0185.881] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\435__Connections_Cellular_Taiwan Mobile (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\435__connections_cellular_taiwan mobile (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0185.881] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="436__C~1.PRO")) returned 1 [0185.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\436__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0185.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0185.882] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f2 [0185.883] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0185.883] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0185.969] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f2, lpOverlapped=0x0) returned 1 [0185.971] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0185.972] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0185.994] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.006] CloseHandle (hObject=0x204) returned 1 [0186.006] CloseHandle (hObject=0x1fc) returned 1 [0186.006] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\436__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0186.007] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0186.007] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="436__C~1.PRO")) returned 0x7d2a18 [0186.007] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="436__C~1.PRO")) returned 0 [0186.007] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0186.007] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\436__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0186.008] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\436__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\436__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0186.008] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="437__C~1.PRO")) returned 1 [0186.009] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\437__connections_cellular_transasia (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.009] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM3X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c0Fz1WEgKFR21Xd23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm3x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c0fz1wegkfr21xd23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.009] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x284 [0186.009] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.010] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.095] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x284, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x284, lpOverlapped=0x0) returned 1 [0186.096] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0186.097] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.119] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.129] CloseHandle (hObject=0x1fc) returned 1 [0186.129] CloseHandle (hObject=0x204) returned 1 [0186.129] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\437__connections_cellular_transasia (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM3X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c0Fz1WEgKFR21Xd23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm3x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c0fz1wegkfr21xd23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0186.130] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM3X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c0Fz1WEgKFR21Xd23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm3x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c0fz1wegkfr21xd23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0186.130] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="437__C~1.PRO")) returned 0x7d3018 [0186.130] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90fd7b44, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90fd7b44, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90fd7b44, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="437__C~1.PRO")) returned 0 [0186.130] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0186.130] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\437__connections_cellular_transasia (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0186.131] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\437__Connections_Cellular_TransAsia (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\437__connections_cellular_transasia (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0186.131] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="438__C~1.PRO")) returned 1 [0186.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\438__connections_cellular_vibo telecom (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM4X19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm4x19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.132] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0186.132] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.133] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.257] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0186.259] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0186.260] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.286] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.297] CloseHandle (hObject=0x204) returned 1 [0186.297] CloseHandle (hObject=0x1fc) returned 1 [0186.297] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\438__connections_cellular_vibo telecom (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM4X19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm4x19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0186.298] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM4X19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm4x19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0186.298] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="438__C~1.PRO")) returned 0x7d2998 [0186.298] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="438__C~1.PRO")) returned 0 [0186.298] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0186.298] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\438__connections_cellular_vibo telecom (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0186.299] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\438__Connections_Cellular_VIBO Telecom (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\438__connections_cellular_vibo telecom (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0186.299] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="439__C~1.PRO")) returned 1 [0186.301] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\439__connections_cellular_vibo telecom (taiwan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.301] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM5X19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm5x19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.302] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c4 [0186.302] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.302] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.419] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c4, lpOverlapped=0x0) returned 1 [0186.421] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0186.422] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.443] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.454] CloseHandle (hObject=0x1fc) returned 1 [0186.454] CloseHandle (hObject=0x204) returned 1 [0186.454] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\439__connections_cellular_vibo telecom (taiwan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM5X19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm5x19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0186.455] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDM5X19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndm5x19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0186.455] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="439__C~1.PRO")) returned 0x7d2c98 [0186.455] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="439__C~1.PRO")) returned 0 [0186.455] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0186.456] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\439__connections_cellular_vibo telecom (taiwan)_i1$(__mvid)@wap.provxml")) returned 1 [0186.456] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\439__Connections_Cellular_VIBO Telecom (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\439__connections_cellular_vibo telecom (taiwan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0186.457] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml", cAlternateFileName="43__CO~1.PRO")) returned 1 [0186.457] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\43__connections_cellular_velcom (belarus)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.457] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndnfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.459] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x354 [0186.459] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.459] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.530] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x354, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x354, lpOverlapped=0x0) returned 1 [0186.531] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0186.532] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.557] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.568] CloseHandle (hObject=0x204) returned 1 [0186.568] CloseHandle (hObject=0x1fc) returned 1 [0186.568] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\43__connections_cellular_velcom (belarus)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndnfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0186.569] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndnfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0186.569] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml", cAlternateFileName="43__CO~1.PRO")) returned 0x7d2a58 [0186.570] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml", cAlternateFileName="43__CO~1.PRO")) returned 0 [0186.570] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0186.570] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\43__connections_cellular_velcom (belarus)_i4$(__mvid)@wap.provxml")) returned 1 [0186.572] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\43__Connections_Cellular_VELCOM (Belarus)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\43__connections_cellular_velcom (belarus)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0186.572] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="440__C~1.PRO")) returned 1 [0186.572] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\440__connections_cellular_vibo telecom (taiwan)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.572] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQwX19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqwx19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.573] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bf [0186.573] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.574] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.641] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bf, lpOverlapped=0x0) returned 1 [0186.642] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0186.643] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.678] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.689] CloseHandle (hObject=0x1fc) returned 1 [0186.689] CloseHandle (hObject=0x204) returned 1 [0186.689] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\440__connections_cellular_vibo telecom (taiwan)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQwX19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqwx19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0186.690] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQwX19D3256ZWN01W96c19DZW4sdW42cl9WSUJPIFRl3GVj320gKFR21Xd23ilf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqwx19d3256zwn01w96c19dzw4sdw42cl9wsujpifrl3gvj320gkfr21xd23ilf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0186.690] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="440__C~1.PRO")) returned 0x7d2b18 [0186.690] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="440__C~1.PRO")) returned 0 [0186.691] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0186.691] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\440__connections_cellular_vibo telecom (taiwan)_i2$(__mvid)@wap.provxml")) returned 1 [0186.692] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\440__Connections_Cellular_VIBO Telecom (Taiwan)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\440__connections_cellular_vibo telecom (taiwan)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0186.692] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="441__C~1.PRO")) returned 1 [0186.692] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\441__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.692] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.693] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cc [0186.693] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.693] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.829] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cc, lpOverlapped=0x0) returned 1 [0186.830] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0186.831] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.855] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.866] CloseHandle (hObject=0x204) returned 1 [0186.866] CloseHandle (hObject=0x1fc) returned 1 [0186.867] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\441__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0186.868] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0186.868] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="441__C~1.PRO")) returned 0x7d3018 [0186.868] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="441__C~1.PRO")) returned 0 [0186.868] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0186.868] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\441__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0186.869] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\441__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\441__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0186.869] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="442__C~1.PRO")) returned 1 [0186.869] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\442__connections_cellular_vodacom tanzania (tanzania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.870] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFR23np23ml2IC2UYW56YW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqyx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifr23np23ml2ic2uyw56yw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.870] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0186.870] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.871] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0186.937] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0186.940] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0186.942] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0186.965] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0186.976] CloseHandle (hObject=0x1fc) returned 1 [0186.976] CloseHandle (hObject=0x204) returned 1 [0186.976] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\442__connections_cellular_vodacom tanzania (tanzania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFR23np23ml2IC2UYW56YW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqyx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifr23np23ml2ic2uyw56yw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0186.978] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIFR23np23ml2IC2UYW56YW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqyx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tifr23np23ml2ic2uyw56yw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0186.978] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="442__C~1.PRO")) returned 0x7d3098 [0186.978] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="442__C~1.PRO")) returned 0 [0186.979] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0186.979] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\442__connections_cellular_vodacom tanzania (tanzania)_i0$(__mvid)@wap.provxml")) returned 1 [0186.980] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\442__Connections_Cellular_Vodacom Tanzania (Tanzania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\442__connections_cellular_vodacom tanzania (tanzania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0186.980] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="443__C~1.PRO")) returned 1 [0186.980] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\443__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0186.980] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0186.981] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0186.981] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0186.981] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.071] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0187.072] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0187.073] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.096] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.107] CloseHandle (hObject=0x204) returned 1 [0187.107] CloseHandle (hObject=0x1fc) returned 1 [0187.108] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\443__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0187.108] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndqzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0187.109] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="443__C~1.PRO")) returned 0x7d2998 [0187.109] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ffddb3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ffddb3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ffddb3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="443__C~1.PRO")) returned 0 [0187.109] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0187.109] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\443__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0187.110] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\443__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\443__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0187.110] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="444__C~1.PRO")) returned 1 [0187.110] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\444__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.112] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ0X19D3256ZWN01W96c19DZW4sdW42cl9BSVMgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq0x19d3256zwn01w96c19dzw4sdw42cl9bsvmgkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.116] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0187.116] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.117] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.182] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0187.185] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0187.186] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.213] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.226] CloseHandle (hObject=0x1fc) returned 1 [0187.226] CloseHandle (hObject=0x204) returned 1 [0187.227] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\444__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ0X19D3256ZWN01W96c19DZW4sdW42cl9BSVMgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq0x19d3256zwn01w96c19dzw4sdw42cl9bsvmgkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0187.228] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ0X19D3256ZWN01W96c19DZW4sdW42cl9BSVMgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq0x19d3256zwn01w96c19dzw4sdw42cl9bsvmgkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0187.228] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="444__C~1.PRO")) returned 0x7d3098 [0187.228] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="444__C~1.PRO")) returned 0 [0187.228] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0187.228] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\444__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml")) returned 1 [0187.229] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\444__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\444__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0187.229] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="445__C~1.PRO")) returned 1 [0187.230] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\445__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.230] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.230] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d9 [0187.230] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.231] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.325] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d9, lpOverlapped=0x0) returned 1 [0187.326] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0187.327] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.349] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.361] CloseHandle (hObject=0x204) returned 1 [0187.361] CloseHandle (hObject=0x1fc) returned 1 [0187.362] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\445__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0187.362] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0187.363] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="445__C~1.PRO")) returned 0x7d2a18 [0187.363] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="445__C~1.PRO")) returned 0 [0187.363] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0187.363] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\445__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0187.364] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\445__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\445__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0187.364] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="446__C~1.PRO")) returned 1 [0187.364] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\446__connections_cellular_dtac (thailand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.364] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ2X19D3256ZWN01W96c19DZW4sdW42cl9EVEFDIC2U1GFp3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq2x19d3256zwn01w96c19dzw4sdw42cl9evefdic2u1gfp3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.365] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x287 [0187.365] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.365] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.436] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x287, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x287, lpOverlapped=0x0) returned 1 [0187.437] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0187.438] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.462] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.472] CloseHandle (hObject=0x1fc) returned 1 [0187.472] CloseHandle (hObject=0x204) returned 1 [0187.473] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\446__connections_cellular_dtac (thailand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ2X19D3256ZWN01W96c19DZW4sdW42cl9EVEFDIC2U1GFp3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq2x19d3256zwn01w96c19dzw4sdw42cl9evefdic2u1gfp3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0187.474] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ2X19D3256ZWN01W96c19DZW4sdW42cl9EVEFDIC2U1GFp3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq2x19d3256zwn01w96c19dzw4sdw42cl9evefdic2u1gfp3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0187.474] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="446__C~1.PRO")) returned 0x7d2cd8 [0187.474] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="446__C~1.PRO")) returned 0 [0187.474] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0187.474] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\446__connections_cellular_dtac (thailand)_i0$(__mvid)@wap.provxml")) returned 1 [0187.475] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\446__Connections_Cellular_DTAC (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\446__connections_cellular_dtac (thailand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0187.476] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="447__C~1.PRO")) returned 1 [0187.476] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\447__connections_cellular_orange (thailand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.476] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.477] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x307 [0187.477] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.477] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.730] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x307, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x307, lpOverlapped=0x0) returned 1 [0187.731] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0187.732] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.755] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.766] CloseHandle (hObject=0x204) returned 1 [0187.766] CloseHandle (hObject=0x1fc) returned 1 [0187.766] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\447__connections_cellular_orange (thailand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0187.767] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0187.767] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="447__C~1.PRO")) returned 0x7d3018 [0187.767] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="447__C~1.PRO")) returned 0 [0187.767] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0187.767] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\447__connections_cellular_orange (thailand)_i0$(__mvid)@wap.provxml")) returned 1 [0187.768] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\447__Connections_Cellular_Orange (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\447__connections_cellular_orange (thailand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0187.768] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x0, cFileName="448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="448__C~1.PRO")) returned 1 [0187.769] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\448__connections_cellular_orascom (tunisia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.769] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmFzY29tIC2UdW5pc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq4x19d3256zwn01w96c19dzw4sdw42cl9pcmfzy29tic2udw5pc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.769] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x313 [0187.769] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.772] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.841] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x313, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x313, lpOverlapped=0x0) returned 1 [0187.843] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0187.844] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.868] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.879] CloseHandle (hObject=0x1fc) returned 1 [0187.879] CloseHandle (hObject=0x204) returned 1 [0187.879] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\448__connections_cellular_orascom (tunisia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmFzY29tIC2UdW5pc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq4x19d3256zwn01w96c19dzw4sdw42cl9pcmfzy29tic2udw5pc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0187.880] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmFzY29tIC2UdW5pc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq4x19d3256zwn01w96c19dzw4sdw42cl9pcmfzy29tic2udw5pc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0187.881] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="448__C~1.PRO")) returned 0x7d3098 [0187.881] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9102401b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9102401b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9102401b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="448__C~1.PRO")) returned 0 [0187.881] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0187.881] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\448__connections_cellular_orascom (tunisia)_i0$(__mvid)@wap.provxml")) returned 1 [0187.882] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\448__Connections_Cellular_Orascom (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\448__connections_cellular_orascom (tunisia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0187.882] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="449__C~1.PRO")) returned 1 [0187.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\449__connections_cellular_avea (turkey)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ5X19D3256ZWN01W96c19DZW4sdW42cl9BdmV2IC2UdXJrZX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq5x19d3256zwn01w96c19dzw4sdw42cl9bdmv2ic2udxjrzx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.883] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0187.883] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.883] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0187.955] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0187.956] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0187.958] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0187.983] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0187.995] CloseHandle (hObject=0x204) returned 1 [0187.995] CloseHandle (hObject=0x1fc) returned 1 [0187.995] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\449__connections_cellular_avea (turkey)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ5X19D3256ZWN01W96c19DZW4sdW42cl9BdmV2IC2UdXJrZX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq5x19d3256zwn01w96c19dzw4sdw42cl9bdmv2ic2udxjrzx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0187.996] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDQ5X19D3256ZWN01W96c19DZW4sdW42cl9BdmV2IC2UdXJrZX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndq5x19d3256zwn01w96c19dzw4sdw42cl9bdmv2ic2udxjrzx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0187.996] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="449__C~1.PRO")) returned 0x7d2998 [0187.996] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="449__C~1.PRO")) returned 0 [0187.996] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0187.996] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\449__connections_cellular_avea (turkey)_i0$(__mvid)@wap.provxml")) returned 1 [0187.997] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\449__Connections_Cellular_Avea (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\449__connections_cellular_avea (turkey)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0187.997] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="44__CO~1.PRO")) returned 1 [0187.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\44__connections_cellular_base nv-sa (belgium)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0187.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JBU0UgTlYtU0EgKEJl3GdpdW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndrfx0nv3m5ly3rp325zx0nl3g413gfyx0jbu0ugtlytu0egkejl3gdpdw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0187.998] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x309 [0187.998] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0187.999] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.088] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x309, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x309, lpOverlapped=0x0) returned 1 [0188.089] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0188.090] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.112] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.124] CloseHandle (hObject=0x1fc) returned 1 [0188.124] CloseHandle (hObject=0x204) returned 1 [0188.124] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\44__connections_cellular_base nv-sa (belgium)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JBU0UgTlYtU0EgKEJl3GdpdW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndrfx0nv3m5ly3rp325zx0nl3g413gfyx0jbu0ugtlytu0egkejl3gdpdw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0188.125] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JBU0UgTlYtU0EgKEJl3GdpdW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndrfx0nv3m5ly3rp325zx0nl3g413gfyx0jbu0ugtlytu0egkejl3gdpdw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0188.125] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="44__CO~1.PRO")) returned 0x7d2a18 [0188.125] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90247f0e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90247f0e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90247f0e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="44__CO~1.PRO")) returned 0 [0188.125] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0188.125] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\44__connections_cellular_base nv-sa (belgium)_i0$(__mvid)@wap.provxml")) returned 1 [0188.126] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\44__Connections_Cellular_BASE NV-SA (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\44__connections_cellular_base nv-sa (belgium)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0188.126] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="450__C~1.PRO")) returned 1 [0188.126] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\450__connections_cellular_kktcell (turkey)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0188.127] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUwX19D3256ZWN01W96c19DZW4sdW42cl9LS1RDRU4MIC2UdXJrZX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduwx19d3256zwn01w96c19dzw4sdw42cl9ls1rdru4mic2udxjrzx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0188.127] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0188.127] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0188.128] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.192] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0188.194] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0188.195] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.217] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.228] CloseHandle (hObject=0x204) returned 1 [0188.228] CloseHandle (hObject=0x1fc) returned 1 [0188.228] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\450__connections_cellular_kktcell (turkey)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUwX19D3256ZWN01W96c19DZW4sdW42cl9LS1RDRU4MIC2UdXJrZX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduwx19d3256zwn01w96c19dzw4sdw42cl9ls1rdru4mic2udxjrzx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0188.229] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUwX19D3256ZWN01W96c19DZW4sdW42cl9LS1RDRU4MIC2UdXJrZX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduwx19d3256zwn01w96c19dzw4sdw42cl9ls1rdru4mic2udxjrzx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0188.229] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="450__C~1.PRO")) returned 0x7d3098 [0188.229] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="450__C~1.PRO")) returned 0 [0188.229] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0188.229] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\450__connections_cellular_kktcell (turkey)_i0$(__mvid)@wap.provxml")) returned 1 [0188.230] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\450__Connections_Cellular_KKTCELL (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\450__connections_cellular_kktcell (turkey)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0188.230] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="451__C~1.PRO")) returned 1 [0188.230] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\451__connections_cellular_turkcell (turkey)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0188.232] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU4X19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu4x19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0188.233] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0188.233] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0188.233] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.328] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0188.330] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0188.331] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.354] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.365] CloseHandle (hObject=0x1fc) returned 1 [0188.365] CloseHandle (hObject=0x204) returned 1 [0188.366] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\451__connections_cellular_turkcell (turkey)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU4X19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu4x19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0188.367] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU4X19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu4x19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0188.367] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="451__C~1.PRO")) returned 0x7d2b98 [0188.367] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="451__C~1.PRO")) returned 0 [0188.367] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0188.367] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\451__connections_cellular_turkcell (turkey)_i0$(__mvid)@wap.provxml")) returned 1 [0188.368] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\451__Connections_Cellular_Turkcell (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\451__connections_cellular_turkcell (turkey)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0188.368] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml", cAlternateFileName="452__C~1.PRO")) returned 1 [0188.368] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\452__connections_cellular_turkcell (turkey)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0188.368] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUyX19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduyx19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0188.369] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0188.369] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0188.369] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.434] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0188.436] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0188.437] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.460] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.471] CloseHandle (hObject=0x204) returned 1 [0188.471] CloseHandle (hObject=0x1fc) returned 1 [0188.471] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\452__connections_cellular_turkcell (turkey)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUyX19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduyx19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0188.472] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUyX19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduyx19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0188.472] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml", cAlternateFileName="452__C~1.PRO")) returned 0x7d3018 [0188.472] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9104a28e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9104a28e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9104a28e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml", cAlternateFileName="452__C~1.PRO")) returned 0 [0188.472] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0188.472] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\452__connections_cellular_turkcell (turkey)_i1$(__mvid)@wap.provxml")) returned 1 [0188.474] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\452__Connections_Cellular_Turkcell (Turkey)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\452__connections_cellular_turkcell (turkey)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0188.474] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml", cAlternateFileName="453__C~1.PRO")) returned 1 [0188.474] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\453__connections_cellular_turkcell (turkey)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0188.474] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUzX19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduzx19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0188.475] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0188.475] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0188.475] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.546] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0188.548] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0188.549] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.573] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.584] CloseHandle (hObject=0x1fc) returned 1 [0188.584] CloseHandle (hObject=0x204) returned 1 [0188.584] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\453__connections_cellular_turkcell (turkey)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUzX19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduzx19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0188.585] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDUzX19D3256ZWN01W96c19DZW4sdW42cl9UdXJrY2Vs3CAoVHVy12V5KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nduzx19d3256zwn01w96c19dzw4sdw42cl9udxjry2vs3caovhvy12v5kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0188.585] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml", cAlternateFileName="453__C~1.PRO")) returned 0x7d2c18 [0188.585] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml", cAlternateFileName="453__C~1.PRO")) returned 0 [0188.585] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0188.585] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\453__connections_cellular_turkcell (turkey)_i2$(__mvid)@wap.provxml")) returned 1 [0188.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\453__Connections_Cellular_Turkcell (Turkey)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\453__connections_cellular_turkcell (turkey)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0188.587] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="454__C~1.PRO")) returned 1 [0188.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\454__connections_cellular_vodafone tr (turkey)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0188.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBUUiAoVHVy12V5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbuuiaovhvy12v5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0188.590] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34e [0188.590] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0188.591] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.699] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34e, lpOverlapped=0x0) returned 1 [0188.700] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0188.701] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.784] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.796] CloseHandle (hObject=0x204) returned 1 [0188.796] CloseHandle (hObject=0x1fc) returned 1 [0188.796] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\454__connections_cellular_vodafone tr (turkey)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBUUiAoVHVy12V5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbuuiaovhvy12v5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0188.797] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBUUiAoVHVy12V5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbuuiaovhvy12v5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0188.797] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="454__C~1.PRO")) returned 0x7d3018 [0188.797] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml", cAlternateFileName="454__C~1.PRO")) returned 0 [0188.797] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0188.797] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\454__connections_cellular_vodafone tr (turkey)_i0$(__mvid)@wap.provxml")) returned 1 [0188.798] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\454__Connections_Cellular_Vodafone TR (Turkey)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\454__connections_cellular_vodafone tr (turkey)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0188.799] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="455__C~1.PRO")) returned 1 [0188.799] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\455__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0188.799] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0188.799] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0188.800] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0188.800] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0188.961] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0188.962] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0188.963] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0188.986] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0188.998] CloseHandle (hObject=0x1fc) returned 1 [0188.998] CloseHandle (hObject=0x204) returned 1 [0188.998] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\455__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0188.999] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0188.999] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="455__C~1.PRO")) returned 0x7d3018 [0189.000] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="455__C~1.PRO")) returned 0 [0189.000] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0189.000] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\455__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0189.001] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\455__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\455__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0189.001] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="456__C~1.PRO")) returned 1 [0189.001] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\456__connections_cellular_vf kktc telsim (cyprus)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0189.001] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU2X19D3256ZWN01W96c19DZW4sdW42cl9WRiBLS1RDIFRl3HNp3SAoQ3lwcnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu2x19d3256zwn01w96c19dzw4sdw42cl9wribls1rdifrl3hnp3saoq3lwcnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0189.002] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d9 [0189.002] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0189.003] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0189.157] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d9, lpOverlapped=0x0) returned 1 [0189.159] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0189.160] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0189.226] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.237] CloseHandle (hObject=0x204) returned 1 [0189.237] CloseHandle (hObject=0x1fc) returned 1 [0189.237] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\456__connections_cellular_vf kktc telsim (cyprus)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU2X19D3256ZWN01W96c19DZW4sdW42cl9WRiBLS1RDIFRl3HNp3SAoQ3lwcnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu2x19d3256zwn01w96c19dzw4sdw42cl9wribls1rdifrl3hnp3saoq3lwcnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0189.238] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU2X19D3256ZWN01W96c19DZW4sdW42cl9WRiBLS1RDIFRl3HNp3SAoQ3lwcnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu2x19d3256zwn01w96c19dzw4sdw42cl9wribls1rdifrl3hnp3saoq3lwcnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0189.238] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="456__C~1.PRO")) returned 0x7d3018 [0189.238] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="456__C~1.PRO")) returned 0 [0189.238] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0189.238] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\456__connections_cellular_vf kktc telsim (cyprus)_i0$(__mvid)@wap.provxml")) returned 1 [0189.239] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\456__Connections_Cellular_VF KKTC Telsim (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\456__connections_cellular_vf kktc telsim (cyprus)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0189.239] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="457__C~1.PRO")) returned 1 [0189.240] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\457__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0189.240] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0189.240] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0189.240] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0189.241] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0189.415] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0189.416] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0189.417] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0189.439] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0189.451] CloseHandle (hObject=0x1fc) returned 1 [0189.451] CloseHandle (hObject=0x204) returned 1 [0189.451] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\457__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0189.452] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0189.452] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="457__C~1.PRO")) returned 0x7d2918 [0189.452] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910704f6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910704f6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910704f6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="457__C~1.PRO")) returned 0 [0189.452] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0189.452] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\457__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0189.453] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\457__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\457__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0189.453] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="458__C~1.PRO")) returned 1 [0189.454] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\458__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0189.454] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU4X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu4x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0189.454] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0189.454] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0189.455] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0189.613] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0190.077] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0190.078] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.101] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.112] CloseHandle (hObject=0x204) returned 1 [0190.112] CloseHandle (hObject=0x1fc) returned 1 [0190.112] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\458__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU4X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu4x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0190.113] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU4X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu4x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0190.113] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="458__C~1.PRO")) returned 0x7d3018 [0190.113] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="458__C~1.PRO")) returned 0 [0190.113] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0190.113] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\458__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml")) returned 1 [0190.118] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\458__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\458__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0190.118] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", cAlternateFileName="459__C~1.PRO")) returned 1 [0190.118] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\459__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.119] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU5X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu5x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.120] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0190.120] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.120] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.186] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0190.188] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0190.189] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.217] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.228] CloseHandle (hObject=0x1fc) returned 1 [0190.228] CloseHandle (hObject=0x204) returned 1 [0190.228] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\459__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU5X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu5x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0190.229] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDU5X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndu5x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0190.229] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", cAlternateFileName="459__C~1.PRO")) returned 0x7d2c58 [0190.229] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", cAlternateFileName="459__C~1.PRO")) returned 0 [0190.229] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0190.229] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\459__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml")) returned 1 [0190.230] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\459__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\459__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0190.230] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="45__CO~1.PRO")) returned 1 [0190.231] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\45__connections_cellular_orange (belgium)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.231] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndvfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.232] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0190.232] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.232] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.298] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0190.300] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0190.301] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.325] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.337] CloseHandle (hObject=0x204) returned 1 [0190.337] CloseHandle (hObject=0x1fc) returned 1 [0190.337] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\45__connections_cellular_orange (belgium)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndvfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0190.338] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndvfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0190.339] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="45__CO~1.PRO")) returned 0x7d2998 [0190.339] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="45__CO~1.PRO")) returned 0 [0190.339] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0190.339] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\45__connections_cellular_orange (belgium)_i0$(__mvid)@wap.provxml")) returned 1 [0190.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\45__Connections_Cellular_ORANGE (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\45__connections_cellular_orange (belgium)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0190.340] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", cAlternateFileName="460__C~1.PRO")) returned 1 [0190.340] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\460__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.340] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYwX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndywx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.342] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0190.342] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.343] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.439] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0190.441] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0190.442] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.465] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.477] CloseHandle (hObject=0x1fc) returned 1 [0190.477] CloseHandle (hObject=0x204) returned 1 [0190.477] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\460__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYwX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndywx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0190.478] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYwX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndywx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0190.478] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", cAlternateFileName="460__C~1.PRO")) returned 0x7d2998 [0190.478] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", cAlternateFileName="460__C~1.PRO")) returned 0 [0190.478] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0190.478] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\460__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml")) returned 1 [0190.479] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\460__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\460__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0190.479] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", cAlternateFileName="461__C~1.PRO")) returned 1 [0190.480] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\461__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.480] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY4X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy4x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.480] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0190.480] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.481] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.559] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0190.560] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0190.561] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.585] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.596] CloseHandle (hObject=0x204) returned 1 [0190.596] CloseHandle (hObject=0x1fc) returned 1 [0190.596] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\461__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY4X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy4x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0190.597] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY4X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy4x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0190.597] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", cAlternateFileName="461__C~1.PRO")) returned 0x7d2918 [0190.598] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", cAlternateFileName="461__C~1.PRO")) returned 0 [0190.598] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0190.598] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\461__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml")) returned 1 [0190.599] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\461__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\461__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0190.599] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", cAlternateFileName="462__C~1.PRO")) returned 1 [0190.599] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\462__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.600] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYyX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndyyx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.601] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0190.601] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.601] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.678] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0190.679] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0190.680] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.704] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.769] CloseHandle (hObject=0x1fc) returned 1 [0190.769] CloseHandle (hObject=0x204) returned 1 [0190.769] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\462__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYyX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndyyx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0190.770] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYyX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndyyx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0190.770] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", cAlternateFileName="462__C~1.PRO")) returned 0x7d2b18 [0190.770] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91096761, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91096761, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91096761, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", cAlternateFileName="462__C~1.PRO")) returned 0 [0190.771] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0190.771] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\462__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml")) returned 1 [0190.772] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\462__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\462__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0190.772] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="463__C~1.PRO")) returned 1 [0190.772] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\463__connections_cellular_astelit (ukraine)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.772] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYzX19D3256ZWN01W96c19DZW4sdW42cl9Bc3Rl3Gl0IC2V13J21W5lKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndyzx19d3256zwn01w96c19dzw4sdw42cl9bc3rl3gl0ic2v13j21w5lkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.773] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0190.773] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.773] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.840] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0190.844] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0190.846] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.870] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.882] CloseHandle (hObject=0x204) returned 1 [0190.882] CloseHandle (hObject=0x1fc) returned 1 [0190.883] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\463__connections_cellular_astelit (ukraine)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYzX19D3256ZWN01W96c19DZW4sdW42cl9Bc3Rl3Gl0IC2V13J21W5lKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndyzx19d3256zwn01w96c19dzw4sdw42cl9bc3rl3gl0ic2v13j21w5lkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0190.883] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDYzX19D3256ZWN01W96c19DZW4sdW42cl9Bc3Rl3Gl0IC2V13J21W5lKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndyzx19d3256zwn01w96c19dzw4sdw42cl9bc3rl3gl0ic2v13j21w5lkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0190.884] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="463__C~1.PRO")) returned 0x7d3018 [0190.884] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="463__C~1.PRO")) returned 0 [0190.884] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0190.884] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\463__connections_cellular_astelit (ukraine)_i0$(__mvid)@wap.provxml")) returned 1 [0190.885] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\463__Connections_Cellular_Astelit (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\463__connections_cellular_astelit (ukraine)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0190.885] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="464__C~1.PRO")) returned 1 [0190.885] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\464__connections_cellular_umc (ukraine)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0190.886] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY0X19D3256ZWN01W96c19DZW4sdW42cl9VTUMgKFVrcmFp3mUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy0x19d3256zwn01w96c19dzw4sdw42cl9vtumgkfvrcmfp3mupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0190.886] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x281 [0190.886] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0190.887] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0190.955] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x281, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x281, lpOverlapped=0x0) returned 1 [0190.962] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0190.963] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0190.987] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0190.999] CloseHandle (hObject=0x1fc) returned 1 [0190.999] CloseHandle (hObject=0x204) returned 1 [0190.999] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\464__connections_cellular_umc (ukraine)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY0X19D3256ZWN01W96c19DZW4sdW42cl9VTUMgKFVrcmFp3mUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy0x19d3256zwn01w96c19dzw4sdw42cl9vtumgkfvrcmfp3mupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0191.000] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY0X19D3256ZWN01W96c19DZW4sdW42cl9VTUMgKFVrcmFp3mUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy0x19d3256zwn01w96c19dzw4sdw42cl9vtumgkfvrcmfp3mupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0191.001] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="464__C~1.PRO")) returned 0x7d3018 [0191.001] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="464__C~1.PRO")) returned 0 [0191.001] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0191.001] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\464__connections_cellular_umc (ukraine)_i0$(__mvid)@wap.provxml")) returned 1 [0191.002] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\464__Connections_Cellular_UMC (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\464__connections_cellular_umc (ukraine)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.002] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="465__C~1.PRO")) returned 1 [0191.002] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\465__connections_cellular_utel inet (ukraine)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.002] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY1X19D3256ZWN01W96c19DZW4sdW42cl9VdGVsIElORVQgKFVrcmFp3mUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy1x19d3256zwn01w96c19dzw4sdw42cl9vdgvsielorvqgkfvrcmfp3mupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.003] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x287 [0191.003] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.007] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.088] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x287, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x287, lpOverlapped=0x0) returned 1 [0191.090] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0191.091] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.117] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.129] CloseHandle (hObject=0x204) returned 1 [0191.129] CloseHandle (hObject=0x1fc) returned 1 [0191.129] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\465__connections_cellular_utel inet (ukraine)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY1X19D3256ZWN01W96c19DZW4sdW42cl9VdGVsIElORVQgKFVrcmFp3mUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy1x19d3256zwn01w96c19dzw4sdw42cl9vdgvsielorvqgkfvrcmfp3mupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0191.131] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY1X19D3256ZWN01W96c19DZW4sdW42cl9VdGVsIElORVQgKFVrcmFp3mUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy1x19d3256zwn01w96c19dzw4sdw42cl9vdgvsielorvqgkfvrcmfp3mupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0191.131] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="465__C~1.PRO")) returned 0x7d3018 [0191.131] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="465__C~1.PRO")) returned 0 [0191.131] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0191.131] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\465__connections_cellular_utel inet (ukraine)_i0$(__mvid)@wap.provxml")) returned 1 [0191.133] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\465__Connections_Cellular_Utel INET (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\465__connections_cellular_utel inet (ukraine)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.133] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="466__C~1.PRO")) returned 1 [0191.133] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\466__connections_cellular_du (united arab emirates)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.133] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY2X19D3256ZWN01W96c19DZW4sdW42cl95dSAoVW5pdGV5IEFyYWIgRW1pcmF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy2x19d3256zwn01w96c19dzw4sdw42cl95dsaovw5pdgv5iefyywigrw1pcmf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.134] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0191.134] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.134] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.235] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0191.237] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0191.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.265] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.279] CloseHandle (hObject=0x1fc) returned 1 [0191.279] CloseHandle (hObject=0x204) returned 1 [0191.280] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\466__connections_cellular_du (united arab emirates)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY2X19D3256ZWN01W96c19DZW4sdW42cl95dSAoVW5pdGV5IEFyYWIgRW1pcmF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy2x19d3256zwn01w96c19dzw4sdw42cl95dsaovw5pdgv5iefyywigrw1pcmf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0191.280] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY2X19D3256ZWN01W96c19DZW4sdW42cl95dSAoVW5pdGV5IEFyYWIgRW1pcmF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy2x19d3256zwn01w96c19dzw4sdw42cl95dsaovw5pdgv5iefyywigrw1pcmf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0191.281] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="466__C~1.PRO")) returned 0x7d2c98 [0191.281] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910bc9cd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910bc9cd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910bc9cd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="466__C~1.PRO")) returned 0 [0191.281] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0191.281] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\466__connections_cellular_du (united arab emirates)_i0$(__mvid)@wap.provxml")) returned 1 [0191.282] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\466__Connections_Cellular_du (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\466__connections_cellular_du (united arab emirates)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.283] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="467__C~1.PRO")) returned 1 [0191.283] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\467__connections_cellular_du eitc (united arab emirates)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.283] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY3X19D3256ZWN01W96c19DZW4sdW42cl95dSBFSVRDIC2V3ml0ZWQgQXJ2YiBF3WlyYXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy3x19d3256zwn01w96c19dzw4sdw42cl95dsbfsvrdic2v3ml0zwqgqxj2yibf3wlyyxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.284] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28a [0191.284] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.284] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.363] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28a, lpOverlapped=0x0) returned 1 [0191.365] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0191.366] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.389] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.401] CloseHandle (hObject=0x204) returned 1 [0191.401] CloseHandle (hObject=0x1fc) returned 1 [0191.401] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\467__connections_cellular_du eitc (united arab emirates)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY3X19D3256ZWN01W96c19DZW4sdW42cl95dSBFSVRDIC2V3ml0ZWQgQXJ2YiBF3WlyYXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy3x19d3256zwn01w96c19dzw4sdw42cl95dsbfsvrdic2v3ml0zwqgqxj2yibf3wlyyxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0191.402] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY3X19D3256ZWN01W96c19DZW4sdW42cl95dSBFSVRDIC2V3ml0ZWQgQXJ2YiBF3WlyYXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy3x19d3256zwn01w96c19dzw4sdw42cl95dsbfsvrdic2v3ml0zwqgqxj2yibf3wlyyxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0191.402] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="467__C~1.PRO")) returned 0x7d2918 [0191.402] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="467__C~1.PRO")) returned 0 [0191.402] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0191.402] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\467__connections_cellular_du eitc (united arab emirates)_i0$(__mvid)@wap.provxml")) returned 1 [0191.403] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\467__Connections_Cellular_du EITC (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\467__connections_cellular_du eitc (united arab emirates)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.404] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="468__C~1.PRO")) returned 1 [0191.404] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\468__connections_cellular_etisalat (united arab emirates)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.404] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY4X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCAoVW5pdGV5IEFyYWIgRW1pcmF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy4x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcaovw5pdgv5iefyywigrw1pcmf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.405] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x294 [0191.405] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.405] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.472] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x294, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x294, lpOverlapped=0x0) returned 1 [0191.474] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0191.475] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.498] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.512] CloseHandle (hObject=0x1fc) returned 1 [0191.512] CloseHandle (hObject=0x204) returned 1 [0191.513] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\468__connections_cellular_etisalat (united arab emirates)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY4X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCAoVW5pdGV5IEFyYWIgRW1pcmF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy4x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcaovw5pdgv5iefyywigrw1pcmf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0191.514] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY4X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCAoVW5pdGV5IEFyYWIgRW1pcmF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy4x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcaovw5pdgv5iefyywigrw1pcmf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0191.514] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="468__C~1.PRO")) returned 0x7d2d58 [0191.515] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml", cAlternateFileName="468__C~1.PRO")) returned 0 [0191.515] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0191.515] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\468__connections_cellular_etisalat (united arab emirates)_i0$(__mvid)@wap.provxml")) returned 1 [0191.516] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\468__Connections_Cellular_Etisalat (United Arab Emirates)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\468__connections_cellular_etisalat (united arab emirates)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.516] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="469__C~1.PRO")) returned 1 [0191.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\469__connections_cellular_cable & wireless guernsey ltd (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.517] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY5X19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSAmIFdpcmVsZXNzIEd1ZXJ6c2V5IE40ZCAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy5x19d3256zwn01w96c19dzw4sdw42cl9dywjszsamifdpcmvszxnzied1zxj6c2v5ie40zcaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.523] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29f [0191.523] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.524] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.629] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29f, lpOverlapped=0x0) returned 1 [0191.631] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0191.633] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.655] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.677] CloseHandle (hObject=0x204) returned 1 [0191.677] CloseHandle (hObject=0x1fc) returned 1 [0191.677] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\469__connections_cellular_cable & wireless guernsey ltd (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY5X19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSAmIFdpcmVsZXNzIEd1ZXJ6c2V5IE40ZCAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy5x19d3256zwn01w96c19dzw4sdw42cl9dywjszsamifdpcmvszxnzied1zxj6c2v5ie40zcaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0191.678] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDY5X19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSAmIFdpcmVsZXNzIEd1ZXJ6c2V5IE40ZCAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndy5x19d3256zwn01w96c19dzw4sdw42cl9dywjszsamifdpcmvszxnzied1zxj6c2v5ie40zcaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0191.678] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="469__C~1.PRO")) returned 0x7d2b18 [0191.678] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="469__C~1.PRO")) returned 0 [0191.678] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0191.678] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\469__connections_cellular_cable & wireless guernsey ltd (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0191.679] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\469__Connections_Cellular_Cable & Wireless Guernsey Ltd (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\469__connections_cellular_cable & wireless guernsey ltd (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.680] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml", cAlternateFileName="46__CO~1.PRO")) returned 1 [0191.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\46__connections_cellular_orange (belgium)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndzfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.684] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0191.684] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.684] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.793] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0191.794] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0191.796] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.819] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.831] CloseHandle (hObject=0x1fc) returned 1 [0191.831] CloseHandle (hObject=0x204) returned 1 [0191.831] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\46__connections_cellular_orange (belgium)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndzfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0191.832] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndzfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0191.832] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml", cAlternateFileName="46__CO~1.PRO")) returned 0x7d3018 [0191.832] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml", cAlternateFileName="46__CO~1.PRO")) returned 0 [0191.832] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0191.832] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\46__connections_cellular_orange (belgium)_i1$(__mvid)@wap.provxml")) returned 1 [0191.833] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\46__Connections_Cellular_ORANGE (Belgium)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\46__connections_cellular_orange (belgium)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0191.833] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="470__C~1.PRO")) returned 1 [0191.835] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\470__connections_cellular_manx telecom (pronto gsm) (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.835] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDcwX19D3256ZWN01W96c19DZW4sdW42cl9NYW54IFRl3GVj320gKFBy32503yBHU00pIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndcwx19d3256zwn01w96c19dzw4sdw42cl9nyw54ifrl3gvj320gkfby32503ybhu00pic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.836] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e5 [0191.836] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.836] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0191.904] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e5, lpOverlapped=0x0) returned 1 [0191.905] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0191.906] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0191.931] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0191.942] CloseHandle (hObject=0x204) returned 1 [0191.942] CloseHandle (hObject=0x1fc) returned 1 [0191.942] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\470__connections_cellular_manx telecom (pronto gsm) (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDcwX19D3256ZWN01W96c19DZW4sdW42cl9NYW54IFRl3GVj320gKFBy32503yBHU00pIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndcwx19d3256zwn01w96c19dzw4sdw42cl9nyw54ifrl3gvj320gkfby32503ybhu00pic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0191.943] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDcwX19D3256ZWN01W96c19DZW4sdW42cl9NYW54IFRl3GVj320gKFBy32503yBHU00pIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndcwx19d3256zwn01w96c19dzw4sdw42cl9nyw54ifrl3gvj320gkfby32503ybhu00pic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0191.943] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="470__C~1.PRO")) returned 0x7d3018 [0191.944] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x910e2c39, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x910e2c39, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x910e2c39, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="470__C~1.PRO")) returned 0 [0191.944] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0191.944] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\470__connections_cellular_manx telecom (pronto gsm) (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0191.945] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\470__Connections_Cellular_Manx Telecom (Pronto GSM) (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\470__connections_cellular_manx telecom (pronto gsm) (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0191.945] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="471__C~1.PRO")) returned 1 [0191.945] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\471__connections_cellular_o2 - uk (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0191.945] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc4X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc4x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0191.946] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x368 [0191.946] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0191.946] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.011] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x368, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x368, lpOverlapped=0x0) returned 1 [0192.014] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0192.015] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.038] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.049] CloseHandle (hObject=0x1fc) returned 1 [0192.049] CloseHandle (hObject=0x204) returned 1 [0192.049] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\471__connections_cellular_o2 - uk (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc4X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc4x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0192.050] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc4X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc4x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0192.050] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="471__C~1.PRO")) returned 0x7d29d8 [0192.050] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="471__C~1.PRO")) returned 0 [0192.050] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0192.050] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\471__connections_cellular_o2 - uk (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0192.051] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\471__Connections_Cellular_O2 - UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\471__connections_cellular_o2 - uk (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0192.051] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="472__C~1.PRO")) returned 1 [0192.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\472__connections_cellular_o2 - uk (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDcyX19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndcyx19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.054] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x359 [0192.054] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.054] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.149] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x359, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x359, lpOverlapped=0x0) returned 1 [0192.151] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0192.152] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.174] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.186] CloseHandle (hObject=0x204) returned 1 [0192.186] CloseHandle (hObject=0x1fc) returned 1 [0192.187] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\472__connections_cellular_o2 - uk (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDcyX19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndcyx19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0192.188] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDcyX19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndcyx19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0192.188] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="472__C~1.PRO")) returned 0x7d2c58 [0192.188] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="472__C~1.PRO")) returned 0 [0192.188] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0192.188] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\472__connections_cellular_o2 - uk (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0192.189] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\472__Connections_Cellular_O2 - UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\472__connections_cellular_o2 - uk (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0192.189] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="473__C~1.PRO")) returned 1 [0192.189] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\473__connections_cellular_o2 - uk (united kingdom)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.190] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDczX19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndczx19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.191] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x354 [0192.191] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.191] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.258] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x354, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x354, lpOverlapped=0x0) returned 1 [0192.261] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0192.262] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.286] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.297] CloseHandle (hObject=0x1fc) returned 1 [0192.297] CloseHandle (hObject=0x204) returned 1 [0192.297] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\473__connections_cellular_o2 - uk (united kingdom)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDczX19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndczx19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0192.298] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDczX19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndczx19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0192.298] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="473__C~1.PRO")) returned 0x7d2d58 [0192.298] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91108ea4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="473__C~1.PRO")) returned 0 [0192.298] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0192.298] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\473__connections_cellular_o2 - uk (united kingdom)_i2$(__mvid)@wap.provxml")) returned 1 [0192.299] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\473__Connections_Cellular_O2 - UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\473__connections_cellular_o2 - uk (united kingdom)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0192.300] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="474__C~1.PRO")) returned 1 [0192.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\474__connections_cellular_o2 - uk (united kingdom)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.300] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc0X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc0x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.301] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34e [0192.301] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.301] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.402] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34e, lpOverlapped=0x0) returned 1 [0192.404] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0192.405] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.429] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.440] CloseHandle (hObject=0x204) returned 1 [0192.440] CloseHandle (hObject=0x1fc) returned 1 [0192.440] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\474__connections_cellular_o2 - uk (united kingdom)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc0X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc0x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0192.441] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc0X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc0x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0192.441] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="474__C~1.PRO")) returned 0x7d2a58 [0192.441] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91108ea4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91108ea4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="474__C~1.PRO")) returned 0 [0192.441] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0192.441] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\474__connections_cellular_o2 - uk (united kingdom)_i3$(__mvid)@wap.provxml")) returned 1 [0192.442] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\474__Connections_Cellular_O2 - UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\474__connections_cellular_o2 - uk (united kingdom)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0192.442] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml", cAlternateFileName="475__C~1.PRO")) returned 1 [0192.443] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\475__connections_cellular_o2 - uk (united kingdom)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.443] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc1x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.443] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x354 [0192.443] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.444] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.510] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x354, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x354, lpOverlapped=0x0) returned 1 [0192.512] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0192.513] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.536] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.547] CloseHandle (hObject=0x1fc) returned 1 [0192.547] CloseHandle (hObject=0x204) returned 1 [0192.547] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\475__connections_cellular_o2 - uk (united kingdom)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc1x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0192.549] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAtIFVLIC2V3ml0ZWQgS2l6Z2Rv3Slf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc1x19d3256zwn01w96c19dzw4sdw42cl9pmiatifvlic2v3ml0zwqgs2l6z2rv3slf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0192.549] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml", cAlternateFileName="475__C~1.PRO")) returned 0x7d2a58 [0192.549] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml", cAlternateFileName="475__C~1.PRO")) returned 0 [0192.549] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0192.549] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\475__connections_cellular_o2 - uk (united kingdom)_i4$(__mvid)@wap.provxml")) returned 1 [0192.550] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\475__Connections_Cellular_O2 - UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\475__connections_cellular_o2 - uk (united kingdom)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0192.551] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="476__C~1.PRO")) returned 1 [0192.551] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\476__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.551] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.552] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c7 [0192.552] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.552] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.619] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c7, lpOverlapped=0x0) returned 1 [0192.620] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0192.621] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.646] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.657] CloseHandle (hObject=0x204) returned 1 [0192.657] CloseHandle (hObject=0x1fc) returned 1 [0192.658] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\476__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0192.659] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0192.659] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="476__C~1.PRO")) returned 0x7d3018 [0192.659] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="476__C~1.PRO")) returned 0 [0192.659] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0192.659] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\476__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0192.660] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\476__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\476__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0192.660] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="477__C~1.PRO")) returned 1 [0192.660] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\477__connections_cellular_ee (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.661] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc3X19D3256ZWN01W96c19DZW4sdW42cl9FRSAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc3x19d3256zwn01w96c19dzw4sdw42cl9frsaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.661] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34a [0192.661] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.670] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.792] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34a, lpOverlapped=0x0) returned 1 [0192.794] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0192.795] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.819] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.830] CloseHandle (hObject=0x1fc) returned 1 [0192.830] CloseHandle (hObject=0x204) returned 1 [0192.830] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\477__connections_cellular_ee (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc3X19D3256ZWN01W96c19DZW4sdW42cl9FRSAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc3x19d3256zwn01w96c19dzw4sdw42cl9frsaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0192.831] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc3X19D3256ZWN01W96c19DZW4sdW42cl9FRSAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc3x19d3256zwn01w96c19dzw4sdw42cl9frsaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0192.831] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="477__C~1.PRO")) returned 0x7d3018 [0192.831] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9112f110, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9112f110, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9112f110, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="477__C~1.PRO")) returned 0 [0192.831] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0192.831] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\477__connections_cellular_ee (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0192.832] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\477__Connections_Cellular_EE (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\477__connections_cellular_ee (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0192.832] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="478__C~1.PRO")) returned 1 [0192.832] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\478__connections_cellular_vodafone uk (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.833] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.833] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34c [0192.833] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.834] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0192.903] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34c, lpOverlapped=0x0) returned 1 [0192.904] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0192.905] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0192.929] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0192.940] CloseHandle (hObject=0x204) returned 1 [0192.940] CloseHandle (hObject=0x1fc) returned 1 [0192.940] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\478__connections_cellular_vodafone uk (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0192.941] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0192.941] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="478__C~1.PRO")) returned 0x7d3098 [0192.941] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="478__C~1.PRO")) returned 0 [0192.941] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0192.942] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\478__connections_cellular_vodafone uk (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0192.943] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\478__Connections_Cellular_Vodafone UK (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\478__connections_cellular_vodafone uk (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0192.945] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="479__C~1.PRO")) returned 1 [0192.946] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\479__connections_cellular_vodafone uk (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0192.948] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc5X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc5x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0192.948] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34d [0192.948] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0192.949] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.015] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34d, lpOverlapped=0x0) returned 1 [0193.017] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0193.018] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.041] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.052] CloseHandle (hObject=0x1fc) returned 1 [0193.053] CloseHandle (hObject=0x204) returned 1 [0193.053] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\479__connections_cellular_vodafone uk (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc5X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc5x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0193.054] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDc5X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndc5x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0193.054] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="479__C~1.PRO")) returned 0x7d3098 [0193.054] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="479__C~1.PRO")) returned 0 [0193.054] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0193.054] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\479__connections_cellular_vodafone uk (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0193.055] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\479__Connections_Cellular_Vodafone UK (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\479__connections_cellular_vodafone uk (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0193.055] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml", cAlternateFileName="47__CO~1.PRO")) returned 1 [0193.056] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\47__connections_cellular_orange (belgium)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.056] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nddfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.056] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0193.056] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.057] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.154] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0193.156] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0193.157] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.179] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.190] CloseHandle (hObject=0x204) returned 1 [0193.190] CloseHandle (hObject=0x1fc) returned 1 [0193.190] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\47__connections_cellular_orange (belgium)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nddfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0193.191] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09SQU5HRSAoQmVsZ2l13Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nddfx0nv3m5ly3rp325zx0nl3g413gfyx09squ5hrsaoqmvsz2l13slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0193.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml", cAlternateFileName="47__CO~1.PRO")) returned 0x7d2d58 [0193.192] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml", cAlternateFileName="47__CO~1.PRO")) returned 0 [0193.192] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0193.192] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\47__connections_cellular_orange (belgium)_i2$(__mvid)@wap.provxml")) returned 1 [0193.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\47__Connections_Cellular_ORANGE (Belgium)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\47__connections_cellular_orange (belgium)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0193.193] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="480__C~1.PRO")) returned 1 [0193.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\480__connections_cellular_vodafone uk (united kingdom)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.195] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x359 [0193.195] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.195] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.262] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x359, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x359, lpOverlapped=0x0) returned 1 [0193.263] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0193.264] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.289] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.300] CloseHandle (hObject=0x1fc) returned 1 [0193.300] CloseHandle (hObject=0x204) returned 1 [0193.300] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\480__connections_cellular_vodafone uk (united kingdom)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0193.301] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0193.301] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="480__C~1.PRO")) returned 0x7d3018 [0193.301] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="480__C~1.PRO")) returned 0 [0193.301] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0193.301] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\480__connections_cellular_vodafone uk (united kingdom)_i2$(__mvid)@wap.provxml")) returned 1 [0193.302] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\480__Connections_Cellular_Vodafone UK (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\480__connections_cellular_vodafone uk (united kingdom)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0193.303] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="481__C~1.PRO")) returned 1 [0193.303] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\481__connections_cellular_vodafone uk (united kingdom)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.303] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.303] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0193.304] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.304] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.370] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0193.374] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0193.376] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.400] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.411] CloseHandle (hObject=0x204) returned 1 [0193.411] CloseHandle (hObject=0x1fc) returned 1 [0193.413] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\481__connections_cellular_vodafone uk (united kingdom)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0193.413] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0193.414] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="481__C~1.PRO")) returned 0x7d2a18 [0193.414] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9115537f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9115537f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9115537f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="481__C~1.PRO")) returned 0 [0193.414] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0193.414] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\481__connections_cellular_vodafone uk (united kingdom)_i3$(__mvid)@wap.provxml")) returned 1 [0193.415] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\481__Connections_Cellular_Vodafone UK (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\481__connections_cellular_vodafone uk (united kingdom)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0193.415] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x0, cFileName="482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml", cAlternateFileName="482__C~1.PRO")) returned 1 [0193.415] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\482__connections_cellular_vodafone uk (united kingdom)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.415] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.416] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35c [0193.416] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.417] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.644] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35c, lpOverlapped=0x0) returned 1 [0193.646] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0193.647] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.680] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.691] CloseHandle (hObject=0x1fc) returned 1 [0193.691] CloseHandle (hObject=0x204) returned 1 [0193.691] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\482__connections_cellular_vodafone uk (united kingdom)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0193.692] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0193.692] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml", cAlternateFileName="482__C~1.PRO")) returned 0x7d2b98 [0193.693] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml", cAlternateFileName="482__C~1.PRO")) returned 0 [0193.693] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0193.693] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\482__connections_cellular_vodafone uk (united kingdom)_i4$(__mvid)@wap.provxml")) returned 1 [0193.694] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\482__Connections_Cellular_Vodafone UK (United Kingdom)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\482__connections_cellular_vodafone uk (united kingdom)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0193.694] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml", cAlternateFileName="483__C~1.PRO")) returned 1 [0193.695] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\483__connections_cellular_vodafone uk (united kingdom)_i5$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.695] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.695] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35d [0193.695] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.696] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.803] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35d, lpOverlapped=0x0) returned 1 [0193.806] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0193.807] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.829] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.840] CloseHandle (hObject=0x204) returned 1 [0193.841] CloseHandle (hObject=0x1fc) returned 1 [0193.841] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\483__connections_cellular_vodafone uk (united kingdom)_i5$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0193.842] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDgzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBVSyAoVW5pdGV5IEtp3md5320pX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndgzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbvsyaovw5pdgv5ietp3md5320px251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0193.842] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml", cAlternateFileName="483__C~1.PRO")) returned 0x7d2c18 [0193.842] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml", cAlternateFileName="483__C~1.PRO")) returned 0 [0193.842] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0193.842] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\483__connections_cellular_vodafone uk (united kingdom)_i5$(__mvid)@wap.provxml")) returned 1 [0193.843] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\483__Connections_Cellular_Vodafone UK (United Kingdom)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\483__connections_cellular_vodafone uk (united kingdom)_i5$(__mvid)@wap.provxml")) returned 0xffffffff [0193.843] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="484__C~1.PRO")) returned 1 [0193.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\484__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.847] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0193.847] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.848] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0193.915] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0193.918] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0193.920] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0193.943] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0193.954] CloseHandle (hObject=0x1fc) returned 1 [0193.954] CloseHandle (hObject=0x204) returned 1 [0193.954] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\484__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0193.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0193.955] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="484__C~1.PRO")) returned 0x7d3098 [0193.955] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="484__C~1.PRO")) returned 0 [0193.955] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0193.955] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\484__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0193.956] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\484__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\484__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0193.956] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="485__C~1.PRO")) returned 1 [0193.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\485__connections_cellular_at&t (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0193.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg1X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg1x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0193.957] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0193.957] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0193.958] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.050] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0194.056] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0194.057] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.080] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.092] CloseHandle (hObject=0x204) returned 1 [0194.092] CloseHandle (hObject=0x1fc) returned 1 [0194.092] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\485__connections_cellular_at&t (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg1X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg1x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0194.093] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg1X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg1x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0194.093] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="485__C~1.PRO")) returned 0x7d2c18 [0194.093] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="485__C~1.PRO")) returned 0 [0194.093] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0194.093] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\485__connections_cellular_at&t (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0194.094] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\485__Connections_Cellular_AT&T (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\485__connections_cellular_at&t (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0194.094] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml", cAlternateFileName="486__C~1.PRO")) returned 1 [0194.095] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\486__connections_cellular_at&t (united states)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.095] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg2X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg2x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.095] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0194.096] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.096] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.163] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0194.172] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0194.173] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.196] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.207] CloseHandle (hObject=0x1fc) returned 1 [0194.207] CloseHandle (hObject=0x204) returned 1 [0194.208] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\486__connections_cellular_at&t (united states)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg2X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg2x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0194.208] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg2X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg2x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0194.210] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml", cAlternateFileName="486__C~1.PRO")) returned 0x7d2d58 [0194.210] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml", cAlternateFileName="486__C~1.PRO")) returned 0 [0194.210] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0194.210] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\486__connections_cellular_at&t (united states)_i1$(__mvid)@wap.provxml")) returned 1 [0194.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\486__Connections_Cellular_AT&T (United States)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\486__connections_cellular_at&t (united states)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0194.211] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml", cAlternateFileName="487__C~1.PRO")) returned 1 [0194.212] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\487__connections_cellular_at&t (united states)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.212] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg3X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg3x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.212] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0194.212] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.213] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.310] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0194.312] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0194.313] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.336] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.347] CloseHandle (hObject=0x204) returned 1 [0194.347] CloseHandle (hObject=0x1fc) returned 1 [0194.347] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\487__connections_cellular_at&t (united states)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg3X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg3x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0194.348] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg3X19D3256ZWN01W96c19DZW4sdW42cl9BVCZUIC2V3ml0ZWQgU3R2dGVzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg3x19d3256zwn01w96c19dzw4sdw42cl9bvczuic2v3ml0zwqgu3r2dgvzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0194.348] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml", cAlternateFileName="487__C~1.PRO")) returned 0x7d2b98 [0194.349] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml", cAlternateFileName="487__C~1.PRO")) returned 0 [0194.349] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0194.349] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\487__connections_cellular_at&t (united states)_i2$(__mvid)@wap.provxml")) returned 1 [0194.350] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\487__Connections_Cellular_AT&T (United States)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\487__connections_cellular_at&t (united states)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0194.350] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="488__C~1.PRO")) returned 1 [0194.350] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\488__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.350] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.351] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e4 [0194.351] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.351] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.418] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e4, lpOverlapped=0x0) returned 1 [0194.421] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0194.422] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.445] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.456] CloseHandle (hObject=0x1fc) returned 1 [0194.456] CloseHandle (hObject=0x204) returned 1 [0194.456] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\488__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0194.457] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0194.457] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="488__C~1.PRO")) returned 0x7d2c58 [0194.457] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9117b5eb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9117b5eb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9117b5eb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="488__C~1.PRO")) returned 0 [0194.457] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0194.457] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\488__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0194.458] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\488__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\488__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0194.459] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="489__C~1.PRO")) returned 1 [0194.460] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\489__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.460] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.460] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d9 [0194.460] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.461] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.526] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d9, lpOverlapped=0x0) returned 1 [0194.527] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0194.528] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.556] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.567] CloseHandle (hObject=0x204) returned 1 [0194.567] CloseHandle (hObject=0x1fc) returned 1 [0194.567] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\489__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0194.568] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0194.568] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="489__C~1.PRO")) returned 0x7d2998 [0194.568] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="489__C~1.PRO")) returned 0 [0194.568] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0194.568] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\489__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0194.569] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\489__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\489__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0194.569] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="48__CO~1.PRO")) returned 1 [0194.570] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\48__connections_cellular_proximus (belgium)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.570] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1By332p3XVzIC2CZW4n1XVtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd2fx0nv3m5ly3rp325zx0nl3g413gfyx1by332p3xvzic2czw4n1xvtkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.571] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0194.571] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.572] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.661] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0194.745] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0194.746] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.770] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.781] CloseHandle (hObject=0x1fc) returned 1 [0194.781] CloseHandle (hObject=0x204) returned 1 [0194.781] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\48__connections_cellular_proximus (belgium)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1By332p3XVzIC2CZW4n1XVtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd2fx0nv3m5ly3rp325zx0nl3g413gfyx1by332p3xvzic2czw4n1xvtkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0194.782] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1By332p3XVzIC2CZW4n1XVtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd2fx0nv3m5ly3rp325zx0nl3g413gfyx1by332p3xvzic2czw4n1xvtkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0194.782] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="48__CO~1.PRO")) returned 0x7d2918 [0194.782] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="48__CO~1.PRO")) returned 0 [0194.782] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0194.782] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\48__connections_cellular_proximus (belgium)_i0$(__mvid)@wap.provxml")) returned 1 [0194.783] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\48__Connections_Cellular_Proximus (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\48__connections_cellular_proximus (belgium)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0194.783] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="490__C~1.PRO")) returned 1 [0194.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\490__connections_cellular_cincinnati bell wireless (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5wX19D3256ZWN01W96c19DZW4sdW42cl9D1W5j1W56YXRpIEJl3GwgV2lyZW4lc3MgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5wx19d3256zwn01w96c19dzw4sdw42cl9d1w5j1w56yxrpiejl3gwgv2lyzw4lc3mgkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.784] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29f [0194.784] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.785] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.850] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29f, lpOverlapped=0x0) returned 1 [0194.851] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0194.853] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.876] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.888] CloseHandle (hObject=0x204) returned 1 [0194.889] CloseHandle (hObject=0x1fc) returned 1 [0194.889] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\490__connections_cellular_cincinnati bell wireless (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5wX19D3256ZWN01W96c19DZW4sdW42cl9D1W5j1W56YXRpIEJl3GwgV2lyZW4lc3MgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5wx19d3256zwn01w96c19dzw4sdw42cl9d1w5j1w56yxrpiejl3gwgv2lyzw4lc3mgkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0194.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5wX19D3256ZWN01W96c19DZW4sdW42cl9D1W5j1W56YXRpIEJl3GwgV2lyZW4lc3MgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5wx19d3256zwn01w96c19dzw4sdw42cl9d1w5j1w56yxrpiejl3gwgv2lyzw4lc3mgkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0194.890] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="490__C~1.PRO")) returned 0x7d2b18 [0194.890] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="490__C~1.PRO")) returned 0 [0194.890] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0194.890] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\490__connections_cellular_cincinnati bell wireless (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0194.891] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\490__Connections_Cellular_Cincinnati Bell Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\490__connections_cellular_cincinnati bell wireless (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0194.891] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="491__C~1.PRO")) returned 1 [0194.892] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\491__connections_cellular_plateau wireless (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.892] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND54X19D3256ZWN01W96c19DZW4sdW42cl9Q3GF0ZWF1IFdpcmVsZXNzIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd54x19d3256zwn01w96c19dzw4sdw42cl9q3gf0zwf1ifdpcmvszxnzic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.892] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x294 [0194.892] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0194.893] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0194.958] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x294, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x294, lpOverlapped=0x0) returned 1 [0194.959] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0194.960] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0194.984] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0194.995] CloseHandle (hObject=0x1fc) returned 1 [0194.995] CloseHandle (hObject=0x204) returned 1 [0194.996] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\491__connections_cellular_plateau wireless (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND54X19D3256ZWN01W96c19DZW4sdW42cl9Q3GF0ZWF1IFdpcmVsZXNzIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd54x19d3256zwn01w96c19dzw4sdw42cl9q3gf0zwf1ifdpcmvszxnzic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0194.997] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND54X19D3256ZWN01W96c19DZW4sdW42cl9Q3GF0ZWF1IFdpcmVsZXNzIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd54x19d3256zwn01w96c19dzw4sdw42cl9q3gf0zwf1ifdpcmvszxnzic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0194.997] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="491__C~1.PRO")) returned 0x7d2b18 [0194.997] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="491__C~1.PRO")) returned 0 [0194.997] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0194.997] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\491__connections_cellular_plateau wireless (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0194.998] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\491__Connections_Cellular_Plateau Wireless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\491__connections_cellular_plateau wireless (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0194.998] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="492__C~1.PRO")) returned 1 [0194.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\492__connections_cellular_rural cellular corporation (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0194.999] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5yX19D3256ZWN01W96c19DZW4sdW42cl9SdXJ23CBDZW4sdW42ciBD33Jw33J2dGlv3iAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5yx19d3256zwn01w96c19dzw4sdw42cl9sdxj23cbdzw4sdw42cibd33jw33j2dglv3iaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0194.999] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a2 [0194.999] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.000] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0195.080] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a2, lpOverlapped=0x0) returned 1 [0195.082] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0195.083] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0195.105] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.117] CloseHandle (hObject=0x204) returned 1 [0195.117] CloseHandle (hObject=0x1fc) returned 1 [0195.118] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\492__connections_cellular_rural cellular corporation (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5yX19D3256ZWN01W96c19DZW4sdW42cl9SdXJ23CBDZW4sdW42ciBD33Jw33J2dGlv3iAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5yx19d3256zwn01w96c19dzw4sdw42cl9sdxj23cbdzw4sdw42cibd33jw33j2dglv3iaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0195.118] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5yX19D3256ZWN01W96c19DZW4sdW42cl9SdXJ23CBDZW4sdW42ciBD33Jw33J2dGlv3iAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5yx19d3256zwn01w96c19dzw4sdw42cl9sdxj23cbdzw4sdw42cibd33jw33j2dglv3iaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0195.118] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="492__C~1.PRO")) returned 0x7d2d58 [0195.119] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="492__C~1.PRO")) returned 0 [0195.119] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0195.119] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\492__connections_cellular_rural cellular corporation (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0195.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\492__Connections_Cellular_Rural Cellular Corporation (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\492__connections_cellular_rural cellular corporation (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0195.120] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="493__C~1.PRO")) returned 1 [0195.120] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\493__connections_cellular_suncom (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.120] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5zX19D3256ZWN01W96c19DZW4sdW42cl9TdW5D320gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5zx19d3256zwn01w96c19dzw4sdw42cl9tdw5d320gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.121] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0195.121] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.121] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0195.220] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28e, lpOverlapped=0x0) returned 1 [0195.222] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0195.223] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0195.247] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.258] CloseHandle (hObject=0x1fc) returned 1 [0195.258] CloseHandle (hObject=0x204) returned 1 [0195.259] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\493__connections_cellular_suncom (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5zX19D3256ZWN01W96c19DZW4sdW42cl9TdW5D320gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5zx19d3256zwn01w96c19dzw4sdw42cl9tdw5d320gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0195.259] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND5zX19D3256ZWN01W96c19DZW4sdW42cl9TdW5D320gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd5zx19d3256zwn01w96c19dzw4sdw42cl9tdw5d320gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0195.260] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="493__C~1.PRO")) returned 0x7d3018 [0195.260] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911a1852, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911a1852, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911a1852, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="493__C~1.PRO")) returned 0 [0195.260] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0195.260] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\493__connections_cellular_suncom (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0195.261] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\493__Connections_Cellular_SunCom (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\493__connections_cellular_suncom (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0195.261] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="494__C~1.PRO")) returned 1 [0195.261] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\494__connections_cellular_t-mobile usa (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.261] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0EgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0egkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.262] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0195.262] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.263] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0195.329] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0195.332] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0195.333] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0195.359] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.370] CloseHandle (hObject=0x204) returned 1 [0195.370] CloseHandle (hObject=0x1fc) returned 1 [0195.370] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\494__connections_cellular_t-mobile usa (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0EgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0egkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0195.371] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0EgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0egkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0195.371] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="494__C~1.PRO")) returned 0x7d3018 [0195.372] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="494__C~1.PRO")) returned 0 [0195.372] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0195.372] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\494__connections_cellular_t-mobile usa (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0195.373] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\494__Connections_Cellular_T-Mobile USA (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\494__connections_cellular_t-mobile usa (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0195.373] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="495__C~1.PRO")) returned 1 [0195.373] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\495__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.374] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND51X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd51x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.375] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0195.375] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.375] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0195.442] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0195.444] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0195.445] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0195.469] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.480] CloseHandle (hObject=0x1fc) returned 1 [0195.480] CloseHandle (hObject=0x204) returned 1 [0195.480] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\495__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND51X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd51x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0195.481] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND51X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd51x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0195.481] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="495__C~1.PRO")) returned 0x7d3018 [0195.481] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="495__C~1.PRO")) returned 0 [0195.481] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0195.481] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\495__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0195.482] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\495__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\495__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0195.482] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="496__C~1.PRO")) returned 1 [0195.483] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\496__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.483] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND52X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFRyYWNG325lIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd52x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifryywng325lic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.485] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0195.485] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.485] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0195.586] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0195.816] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0195.817] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0195.840] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.852] CloseHandle (hObject=0x204) returned 1 [0195.852] CloseHandle (hObject=0x1fc) returned 1 [0195.856] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\496__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND52X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFRyYWNG325lIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd52x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifryywng325lic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0195.856] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND52X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFRyYWNG325lIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd52x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifryywng325lic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0195.856] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="496__C~1.PRO")) returned 0x7d3018 [0195.856] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="496__C~1.PRO")) returned 0 [0195.856] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0195.856] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\496__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0195.858] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\496__Connections_Cellular_T-Mobile USA_ TracFone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\496__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0195.858] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="497__C~1.PRO")) returned 1 [0195.858] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\497__connections_cellular_t-mobile usa_ idt (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.858] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIElEVCAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffielevcaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.859] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0195.859] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.860] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0195.929] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0195.937] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0195.938] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0195.962] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0195.973] CloseHandle (hObject=0x1fc) returned 1 [0195.973] CloseHandle (hObject=0x204) returned 1 [0195.973] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\497__connections_cellular_t-mobile usa_ idt (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIElEVCAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffielevcaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0195.974] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIElEVCAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffielevcaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0195.974] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="497__C~1.PRO")) returned 0x7d3018 [0195.975] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911c7ac2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911c7ac2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911c7ac2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="497__C~1.PRO")) returned 0 [0195.975] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0195.975] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\497__connections_cellular_t-mobile usa_ idt (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0195.976] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\497__Connections_Cellular_T-Mobile USA_ IDT (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\497__connections_cellular_t-mobile usa_ idt (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0195.976] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="498__C~1.PRO")) returned 1 [0195.976] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\498__connections_cellular_t-mobile usa_ simple mobile (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0195.976] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND54X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFNp3XBsZSBN32Jp3GUgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd54x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifnp3xbszsbn32jp3gugkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0195.977] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d8 [0195.977] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0195.977] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.044] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d8, lpOverlapped=0x0) returned 1 [0196.057] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0196.058] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.081] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.093] CloseHandle (hObject=0x204) returned 1 [0196.093] CloseHandle (hObject=0x1fc) returned 1 [0196.093] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\498__connections_cellular_t-mobile usa_ simple mobile (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND54X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFNp3XBsZSBN32Jp3GUgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd54x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifnp3xbszsbn32jp3gugkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0196.094] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND54X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFNp3XBsZSBN32Jp3GUgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd54x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifnp3xbszsbn32jp3gugkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0196.094] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="498__C~1.PRO")) returned 0x7d3018 [0196.094] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="498__C~1.PRO")) returned 0 [0196.094] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0196.094] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\498__connections_cellular_t-mobile usa_ simple mobile (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0196.095] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\498__Connections_Cellular_T-Mobile USA_ Simple Mobile (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\498__connections_cellular_t-mobile usa_ simple mobile (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0196.096] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="499__C~1.PRO")) returned 1 [0196.098] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\499__connections_cellular_t-mobile usa_ walmart (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.099] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND55X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFd23G12cnQgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd55x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifd23g12cnqgkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.099] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dd [0196.099] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.100] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.178] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dd, lpOverlapped=0x0) returned 1 [0196.245] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0196.246] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.269] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.280] CloseHandle (hObject=0x1fc) returned 1 [0196.280] CloseHandle (hObject=0x204) returned 1 [0196.281] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\499__connections_cellular_t-mobile usa_ walmart (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND55X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFd23G12cnQgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd55x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifd23g12cnqgkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0196.282] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ND55X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFd23G12cnQgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nd55x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifd23g12cnqgkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0196.282] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="499__C~1.PRO")) returned 0x7d29d8 [0196.282] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="499__C~1.PRO")) returned 0 [0196.282] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0196.282] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\499__connections_cellular_t-mobile usa_ walmart (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0196.283] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\499__Connections_Cellular_T-Mobile USA_ Walmart (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\499__connections_cellular_t-mobile usa_ walmart (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0196.283] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="49__CE~1.PRO")) returned 1 [0196.284] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\49__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.284] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.284] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0196.284] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.285] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.385] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0196.386] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0196.387] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.411] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.424] CloseHandle (hObject=0x204) returned 1 [0196.424] CloseHandle (hObject=0x1fc) returned 1 [0196.424] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\49__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0196.425] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NDlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ndlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0196.425] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="49__CE~1.PRO")) returned 0x7d2cd8 [0196.426] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="49__CE~1.PRO")) returned 0 [0196.426] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0196.426] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\49__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0196.427] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\49__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\49__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0196.427] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="4__CON~1.PRO")) returned 1 [0196.427] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\4__connections_cellular_claro (argentina)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.428] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQ242cm8gKEFyZ2V6dGl6YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nf9fq2963mvjdglv3nnfq2vs3hvsyxjfq242cm8gkefyz2v6dgl6yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.428] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x307 [0196.428] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.429] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.495] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x307, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x307, lpOverlapped=0x0) returned 1 [0196.498] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0196.499] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.522] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.532] CloseHandle (hObject=0x1fc) returned 1 [0196.532] CloseHandle (hObject=0x204) returned 1 [0196.533] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\4__connections_cellular_claro (argentina)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQ242cm8gKEFyZ2V6dGl6YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nf9fq2963mvjdglv3nnfq2vs3hvsyxjfq242cm8gkefyz2v6dgl6yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0196.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQ242cm8gKEFyZ2V6dGl6YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nf9fq2963mvjdglv3nnfq2vs3hvsyxjfq242cm8gkefyz2v6dgl6yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0196.534] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="4__CON~1.PRO")) returned 0x7d2998 [0196.534] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="4__CON~1.PRO")) returned 0 [0196.534] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0196.534] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\4__connections_cellular_claro (argentina)_i0$(__mvid)@wap.provxml")) returned 1 [0196.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\4__Connections_Cellular_Claro (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\4__connections_cellular_claro (argentina)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0196.535] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="500__C~1.PRO")) returned 1 [0196.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\500__connections_cellular_t-mobile usa_ roam mobility (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAwX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFJvYW0gTW9i1W4pdH5gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntawx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifjvyw0gtw9i1w4pdh5gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.536] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0196.536] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.538] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.612] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0196.615] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0196.616] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.642] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.657] CloseHandle (hObject=0x204) returned 1 [0196.658] CloseHandle (hObject=0x1fc) returned 1 [0196.658] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\500__connections_cellular_t-mobile usa_ roam mobility (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAwX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFJvYW0gTW9i1W4pdH5gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntawx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifjvyw0gtw9i1w4pdh5gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0196.659] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAwX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFJvYW0gTW9i1W4pdH5gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntawx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifjvyw0gtw9i1w4pdh5gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0196.659] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="500__C~1.PRO")) returned 0x7d29d8 [0196.660] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="500__C~1.PRO")) returned 0 [0196.660] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0196.660] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\500__connections_cellular_t-mobile usa_ roam mobility (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0196.661] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\500__Connections_Cellular_T-Mobile USA_ Roam Mobility (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\500__connections_cellular_t-mobile usa_ roam mobility (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0196.661] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="501__C~1.PRO")) returned 1 [0196.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\501__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA4X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFRyYWNm325lIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta4x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifryywnm325lic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.663] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0196.663] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.663] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.795] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0196.797] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0196.798] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.822] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.833] CloseHandle (hObject=0x1fc) returned 1 [0196.833] CloseHandle (hObject=0x204) returned 1 [0196.833] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\501__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA4X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFRyYWNm325lIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta4x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifryywnm325lic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0196.834] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA4X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFRyYWNm325lIC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta4x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifryywnm325lic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0196.834] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="501__C~1.PRO")) returned 0x7d2a18 [0196.834] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x911edd2d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x911edd2d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x911edd2d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="501__C~1.PRO")) returned 0 [0196.834] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0196.834] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\501__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0196.836] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\501__Connections_Cellular_T-Mobile USA_ Tracfone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\501__connections_cellular_t-mobile usa_ tracfone (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0196.836] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91213f95, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91213f95, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91213f95, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="502__C~1.PRO")) returned 1 [0196.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\502__connections_cellular_t-mobile usa_ aspider (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIEFTcGl5ZXIgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntayx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffieftcgl5zxigkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.837] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0196.837] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.837] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0196.905] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0196.907] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0196.908] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0196.931] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0196.942] CloseHandle (hObject=0x204) returned 1 [0196.942] CloseHandle (hObject=0x1fc) returned 1 [0196.942] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\502__connections_cellular_t-mobile usa_ aspider (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIEFTcGl5ZXIgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntayx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffieftcgl5zxigkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0196.943] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIEFTcGl5ZXIgKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntayx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffieftcgl5zxigkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0196.943] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91213f95, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91213f95, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91213f95, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="502__C~1.PRO")) returned 0x7d3098 [0196.943] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91213f95, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91213f95, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91213f95, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="502__C~1.PRO")) returned 0 [0196.944] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0196.944] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\502__connections_cellular_t-mobile usa_ aspider (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0196.945] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\502__Connections_Cellular_T-Mobile USA_ ASpider (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\502__connections_cellular_t-mobile usa_ aspider (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0196.945] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91213f95, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91213f95, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91213f95, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="503__C~1.PRO")) returned 1 [0196.945] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\503__connections_cellular_t-mobile usa_ wyless (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0196.947] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFd53GVzcyAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntazx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifd53gvzcyaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0196.947] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0196.947] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0196.948] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.014] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0197.016] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0197.017] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.042] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.053] CloseHandle (hObject=0x1fc) returned 1 [0197.053] CloseHandle (hObject=0x204) returned 1 [0197.054] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\503__connections_cellular_t-mobile usa_ wyless (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFd53GVzcyAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntazx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifd53gvzcyaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0197.054] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTAzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFd53GVzcyAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntazx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifd53gvzcyaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0197.055] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91213f95, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91213f95, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91213f95, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="503__C~1.PRO")) returned 0x7d2998 [0197.055] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91213f95, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91213f95, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91213f95, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="503__C~1.PRO")) returned 0 [0197.055] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0197.055] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\503__connections_cellular_t-mobile usa_ wyless (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0197.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\503__Connections_Cellular_T-Mobile USA_ Wyless (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\503__connections_cellular_t-mobile usa_ wyless (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0197.057] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="504__C~1.PRO")) returned 1 [0197.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\504__connections_cellular_t-mobile usa_ solavei (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFNv3GF2ZW5gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifnv3gf2zw5gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.058] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0197.058] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.059] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.157] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0197.159] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0197.160] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.193] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.206] CloseHandle (hObject=0x204) returned 1 [0197.206] CloseHandle (hObject=0x1fc) returned 1 [0197.207] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\504__connections_cellular_t-mobile usa_ solavei (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFNv3GF2ZW5gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifnv3gf2zw5gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0197.208] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBVU0FfIFNv3GF2ZW5gKFV61XRlZCBTdGF0ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbvu0ffifnv3gf2zw5gkfv61xrlzcbtdgf0zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0197.208] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="504__C~1.PRO")) returned 0x7d2a18 [0197.208] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="504__C~1.PRO")) returned 0 [0197.208] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0197.208] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\504__connections_cellular_t-mobile usa_ solavei (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0197.210] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\504__Connections_Cellular_T-Mobile USA_ Solavei (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\504__connections_cellular_t-mobile usa_ solavei (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0197.210] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml", cAlternateFileName="505__C~1.PRO")) returned 1 [0197.210] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\505__connections_cellular_verizon (united states) admin_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.211] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA1X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBBZG1p3l9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta1x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbbzg1p3l9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.212] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0197.212] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.212] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.284] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0197.288] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0197.289] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.312] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.324] CloseHandle (hObject=0x1fc) returned 1 [0197.324] CloseHandle (hObject=0x204) returned 1 [0197.324] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\505__connections_cellular_verizon (united states) admin_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA1X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBBZG1p3l9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta1x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbbzg1p3l9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0197.325] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA1X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBBZG1p3l9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta1x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbbzg1p3l9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0197.325] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml", cAlternateFileName="505__C~1.PRO")) returned 0x7d2998 [0197.325] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml", cAlternateFileName="505__C~1.PRO")) returned 0 [0197.325] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0197.325] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\505__connections_cellular_verizon (united states) admin_i1$(__mvid)@wap.provxml")) returned 1 [0197.326] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\505__Connections_Cellular_Verizon (United States) Admin_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\505__connections_cellular_verizon (united states) admin_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0197.326] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml", cAlternateFileName="506__C~1.PRO")) returned 1 [0197.327] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\506__connections_cellular_verizon (united states) app_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.327] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA2X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBBcHBf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta2x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbbchbf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.327] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28b [0197.327] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.328] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.430] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28b, lpOverlapped=0x0) returned 1 [0197.432] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0197.434] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.457] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.468] CloseHandle (hObject=0x204) returned 1 [0197.468] CloseHandle (hObject=0x1fc) returned 1 [0197.469] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\506__connections_cellular_verizon (united states) app_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA2X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBBcHBf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta2x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbbchbf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0197.470] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA2X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBBcHBf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta2x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbbchbf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0197.470] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml", cAlternateFileName="506__C~1.PRO")) returned 0x7d2a98 [0197.470] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml", cAlternateFileName="506__C~1.PRO")) returned 0 [0197.470] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0197.470] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\506__connections_cellular_verizon (united states) app_i3$(__mvid)@wap.provxml")) returned 1 [0197.471] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\506__Connections_Cellular_Verizon (United States) App_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\506__connections_cellular_verizon (united states) app_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0197.471] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml", cAlternateFileName="507__C~1.PRO")) returned 1 [0197.471] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\507__connections_cellular_verizon (united states) ims_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.472] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA3X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBJ3XNf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta3x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbj3xnf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.472] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28b [0197.472] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.473] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.538] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28b, lpOverlapped=0x0) returned 1 [0197.540] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0197.541] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.566] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.578] CloseHandle (hObject=0x1fc) returned 1 [0197.578] CloseHandle (hObject=0x204) returned 1 [0197.578] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\507__connections_cellular_verizon (united states) ims_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA3X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBJ3XNf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta3x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbj3xnf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0197.579] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA3X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBJ3XNf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta3x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbj3xnf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0197.579] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml", cAlternateFileName="507__C~1.PRO")) returned 0x7d2d58 [0197.579] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml", cAlternateFileName="507__C~1.PRO")) returned 0 [0197.579] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0197.580] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\507__connections_cellular_verizon (united states) ims_i2$(__mvid)@wap.provxml")) returned 1 [0197.580] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\507__Connections_Cellular_Verizon (United States) Ims_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\507__connections_cellular_verizon (united states) ims_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0197.581] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml", cAlternateFileName="508__C~1.PRO")) returned 1 [0197.581] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\508__connections_cellular_verizon (united states) internet_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.581] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA4X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBJ3nRlcm5ldF9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta4x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbj3nrlcm5ldf9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.582] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x295 [0197.582] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.582] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.649] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x295, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x295, lpOverlapped=0x0) returned 1 [0197.651] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0197.652] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.685] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.696] CloseHandle (hObject=0x204) returned 1 [0197.696] CloseHandle (hObject=0x1fc) returned 1 [0197.696] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\508__connections_cellular_verizon (united states) internet_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA4X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBJ3nRlcm5ldF9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta4x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbj3nrlcm5ldf9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0197.697] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA4X19D3256ZWN01W96c19DZW4sdW42cl9WZXJp7m96IC2V3ml0ZWQgU3R2dGVzKSBJ3nRlcm5ldF9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta4x19d3256zwn01w96c19dzw4sdw42cl9wzxjp7m96ic2v3ml0zwqgu3r2dgvzksbj3nrlcm5ldf9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0197.697] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml", cAlternateFileName="508__C~1.PRO")) returned 0x7d2918 [0197.697] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml", cAlternateFileName="508__C~1.PRO")) returned 0 [0197.697] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0197.697] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\508__connections_cellular_verizon (united states) internet_i0$(__mvid)@wap.provxml")) returned 1 [0197.698] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\508__Connections_Cellular_Verizon (United States) Internet_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\508__connections_cellular_verizon (united states) internet_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0197.698] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="509__C~1.PRO")) returned 1 [0197.699] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\509__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.699] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.700] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1db [0197.700] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.700] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.816] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1db, lpOverlapped=0x0) returned 1 [0197.817] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0197.818] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.841] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.852] CloseHandle (hObject=0x1fc) returned 1 [0197.852] CloseHandle (hObject=0x204) returned 1 [0197.852] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\509__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0197.853] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTA5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nta5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0197.853] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="509__C~1.PRO")) returned 0x7d2c18 [0197.853] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="509__C~1.PRO")) returned 0 [0197.853] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0197.853] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\509__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0197.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\509__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\509__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0197.855] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="50__CO~1.PRO")) returned 1 [0197.855] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\50__connections_cellular_bh telekom bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JIIFRl3GVr320gQm9z3ml2IC2C33N61WEgYW55IE2lcnplZ2921W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntbfx0nv3m5ly3rp325zx0nl3g413gfyx0jiifrl3gvr320gqm9z3ml2ic2c33n61wegyw55ie2lcnplz2921w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.857] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e4 [0197.857] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.857] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0197.922] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e4, lpOverlapped=0x0) returned 1 [0197.924] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0197.925] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0197.950] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0197.961] CloseHandle (hObject=0x204) returned 1 [0197.961] CloseHandle (hObject=0x1fc) returned 1 [0197.962] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\50__connections_cellular_bh telekom bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JIIFRl3GVr320gQm9z3ml2IC2C33N61WEgYW55IE2lcnplZ2921W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntbfx0nv3m5ly3rp325zx0nl3g413gfyx0jiifrl3gvr320gqm9z3ml2ic2c33n61wegyw55ie2lcnplz2921w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0197.962] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JIIFRl3GVr320gQm9z3ml2IC2C33N61WEgYW55IE2lcnplZ2921W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntbfx0nv3m5ly3rp325zx0nl3g413gfyx0jiifrl3gvr320gqm9z3ml2ic2c33n61wegyw55ie2lcnplz2921w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0197.963] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="50__CO~1.PRO")) returned 0x7d2a18 [0197.963] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9026e179, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9026e179, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9026e179, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="50__CO~1.PRO")) returned 0 [0197.963] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0197.963] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\50__connections_cellular_bh telekom bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml")) returned 1 [0197.964] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\50__Connections_Cellular_BH Telekom Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\50__connections_cellular_bh telekom bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0197.964] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml", cAlternateFileName="510__C~1.PRO")) returned 1 [0197.964] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\510__cellular_persimsettings_$(__iccid)_networkblocklist.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0197.965] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX05ldHdvcmtC3G9j104pc3Q6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntewx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx05ldhdvcmtc3g9j104pc3q6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0197.965] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c7 [0197.965] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0197.966] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.049] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c7, lpOverlapped=0x0) returned 1 [0198.050] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0198.051] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.075] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.086] CloseHandle (hObject=0x1fc) returned 1 [0198.086] CloseHandle (hObject=0x204) returned 1 [0198.086] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\510__cellular_persimsettings_$(__iccid)_networkblocklist.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX05ldHdvcmtC3G9j104pc3Q6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntewx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx05ldhdvcmtc3g9j104pc3q6chjvdn2t3a99.0ilfzr")) returned 0 [0198.087] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX05ldHdvcmtC3G9j104pc3Q6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntewx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx05ldhdvcmtc3g9j104pc3q6chjvdn2t3a99.0ilfzr")) returned 0x20 [0198.087] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml", cAlternateFileName="510__C~1.PRO")) returned 0x7d2cd8 [0198.087] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml", cAlternateFileName="510__C~1.PRO")) returned 0 [0198.088] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0198.088] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\510__cellular_persimsettings_$(__iccid)_networkblocklist.provxml")) returned 1 [0198.089] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\510__Cellular_PerSimSettings_$(__ICCID)_NetworkBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\510__cellular_persimsettings_$(__iccid)_networkblocklist.provxml")) returned 0xffffffff [0198.089] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml", cAlternateFileName="511__C~1.PRO")) returned 1 [0198.089] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\511__cellular_persimsettings_$(__iccid)_simblocklist.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.089] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX1NJTUJs32NrTGlzdC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx1njtujs32nrtglzdc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.090] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c3 [0198.090] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.091] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.188] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c3, lpOverlapped=0x0) returned 1 [0198.189] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0198.190] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.213] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.273] CloseHandle (hObject=0x204) returned 1 [0198.274] CloseHandle (hObject=0x1fc) returned 1 [0198.274] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\511__cellular_persimsettings_$(__iccid)_simblocklist.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX1NJTUJs32NrTGlzdC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx1njtujs32nrtglzdc5wcm927g1s.0ilfzr")) returned 0 [0198.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX1NJTUJs32NrTGlzdC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx1njtujs32nrtglzdc5wcm927g1s.0ilfzr")) returned 0x20 [0198.275] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml", cAlternateFileName="511__C~1.PRO")) returned 0x7d3018 [0198.275] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9123a200, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9123a200, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9123a200, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml", cAlternateFileName="511__C~1.PRO")) returned 0 [0198.275] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0198.275] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\511__cellular_persimsettings_$(__iccid)_simblocklist.provxml")) returned 1 [0198.276] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\511__Cellular_PerSimSettings_$(__ICCID)_SIMBlockList.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\511__cellular_persimsettings_$(__iccid)_simblocklist.provxml")) returned 0xffffffff [0198.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="512__C~1.PRO")) returned 1 [0198.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\512__connections_cellular_ancel (uruguay)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.280] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEyX19D3256ZWN01W96c19DZW4sdW42cl9B3mNl3CAoVXJ1Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nteyx19d3256zwn01w96c19dzw4sdw42cl9b3mnl3caovxj1z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.281] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x283 [0198.281] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.281] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.347] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x283, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x283, lpOverlapped=0x0) returned 1 [0198.350] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0198.351] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.375] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.386] CloseHandle (hObject=0x1fc) returned 1 [0198.386] CloseHandle (hObject=0x204) returned 1 [0198.386] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\512__connections_cellular_ancel (uruguay)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEyX19D3256ZWN01W96c19DZW4sdW42cl9B3mNl3CAoVXJ1Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nteyx19d3256zwn01w96c19dzw4sdw42cl9b3mnl3caovxj1z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0198.388] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEyX19D3256ZWN01W96c19DZW4sdW42cl9B3mNl3CAoVXJ1Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nteyx19d3256zwn01w96c19dzw4sdw42cl9b3mnl3caovxj1z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0198.388] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="512__C~1.PRO")) returned 0x7d2ad8 [0198.388] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="512__C~1.PRO")) returned 0 [0198.388] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0198.388] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\512__connections_cellular_ancel (uruguay)_i0$(__mvid)@wap.provxml")) returned 1 [0198.389] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\512__Connections_Cellular_Ancel (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\512__connections_cellular_ancel (uruguay)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0198.389] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="513__C~1.PRO")) returned 1 [0198.390] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\513__connections_cellular_claro (uruguay)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.390] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoVXJ1Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntezx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaovxj1z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.391] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0198.391] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.391] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.489] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0198.491] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0198.492] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.515] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.526] CloseHandle (hObject=0x204) returned 1 [0198.526] CloseHandle (hObject=0x1fc) returned 1 [0198.526] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\513__connections_cellular_claro (uruguay)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoVXJ1Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntezx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaovxj1z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0198.527] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTEzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoVXJ1Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntezx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaovxj1z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0198.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="513__C~1.PRO")) returned 0x7d3098 [0198.527] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="513__C~1.PRO")) returned 0 [0198.527] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0198.527] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\513__connections_cellular_claro (uruguay)_i0$(__mvid)@wap.provxml")) returned 1 [0198.528] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\513__Connections_Cellular_Claro (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\513__connections_cellular_claro (uruguay)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0198.528] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="514__C~1.PRO")) returned 1 [0198.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\514__connections_cellular_telefonica (uruguay)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2VcnVndWF5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte0x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2vcnvndwf5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.530] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0198.530] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.530] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.597] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0198.600] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0198.601] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.625] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.638] CloseHandle (hObject=0x1fc) returned 1 [0198.638] CloseHandle (hObject=0x204) returned 1 [0198.638] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\514__connections_cellular_telefonica (uruguay)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2VcnVndWF5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte0x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2vcnvndwf5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0198.639] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2VcnVndWF5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte0x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2vcnvndwf5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0198.639] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="514__C~1.PRO")) returned 0x7d3098 [0198.639] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml", cAlternateFileName="514__C~1.PRO")) returned 0 [0198.639] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0198.639] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\514__connections_cellular_telefonica (uruguay)_i0$(__mvid)@wap.provxml")) returned 1 [0198.640] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\514__Connections_Cellular_Telefonica (Uruguay)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\514__connections_cellular_telefonica (uruguay)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0198.640] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="515__C~1.PRO")) returned 1 [0198.641] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\515__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.641] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.642] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d7 [0198.642] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.642] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.717] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d7, lpOverlapped=0x0) returned 1 [0198.719] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0198.720] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.790] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.800] CloseHandle (hObject=0x204) returned 1 [0198.801] CloseHandle (hObject=0x1fc) returned 1 [0198.801] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\515__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0198.802] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0198.802] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="515__C~1.PRO")) returned 0x7d2b18 [0198.802] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9126046c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9126046c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9126046c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="515__C~1.PRO")) returned 0 [0198.802] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0198.802] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\515__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0198.803] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\515__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\515__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0198.803] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="516__C~1.PRO")) returned 1 [0198.803] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\516__connections_cellular_uzdunrobita (uzbekistan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.805] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE2X19D3256ZWN01W96c19DZW4sdW42cl9V7mR13nJvYml0YSAoVXpiZWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte2x19d3256zwn01w96c19dzw4sdw42cl9v7mr13njvyml0ysaovxpizwtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.806] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0198.806] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.806] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.875] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0198.877] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0198.878] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0198.901] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0198.912] CloseHandle (hObject=0x1fc) returned 1 [0198.912] CloseHandle (hObject=0x204) returned 1 [0198.912] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\516__connections_cellular_uzdunrobita (uzbekistan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE2X19D3256ZWN01W96c19DZW4sdW42cl9V7mR13nJvYml0YSAoVXpiZWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte2x19d3256zwn01w96c19dzw4sdw42cl9v7mr13njvyml0ysaovxpizwtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0198.913] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE2X19D3256ZWN01W96c19DZW4sdW42cl9V7mR13nJvYml0YSAoVXpiZWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte2x19d3256zwn01w96c19dzw4sdw42cl9v7mr13njvyml0ysaovxpizwtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0198.913] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="516__C~1.PRO")) returned 0x7d2c98 [0198.913] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="516__C~1.PRO")) returned 0 [0198.913] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0198.913] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\516__connections_cellular_uzdunrobita (uzbekistan)_i0$(__mvid)@wap.provxml")) returned 1 [0198.914] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\516__Connections_Cellular_Uzdunrobita (Uzbekistan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\516__connections_cellular_uzdunrobita (uzbekistan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0198.914] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml", cAlternateFileName="517__C~1.PRO")) returned 1 [0198.915] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\517__connections_cellular_telefonica (venezuela)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0198.915] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2WZW5l7nVl3GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2wzw5l7nvl3gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0198.916] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x294 [0198.916] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0198.916] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0198.984] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x294, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x294, lpOverlapped=0x0) returned 1 [0198.986] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0198.987] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0199.012] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.024] CloseHandle (hObject=0x204) returned 1 [0199.024] CloseHandle (hObject=0x1fc) returned 1 [0199.025] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\517__connections_cellular_telefonica (venezuela)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2WZW5l7nVl3GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2wzw5l7nvl3gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0199.026] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2WZW5l7nVl3GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2wzw5l7nvl3gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0199.026] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml", cAlternateFileName="517__C~1.PRO")) returned 0x7d2ad8 [0199.026] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml", cAlternateFileName="517__C~1.PRO")) returned 0 [0199.026] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0199.026] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\517__connections_cellular_telefonica (venezuela)_i0$(__mvid)@wap.provxml")) returned 1 [0199.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\517__Connections_Cellular_Telefonica (Venezuela)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\517__connections_cellular_telefonica (venezuela)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0199.027] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="518__C~1.PRO")) returned 1 [0199.027] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\518__connections_cellular_viettel (vietnam)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.028] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE4X19D3256ZWN01W96c19DZW4sdW42cl9W1WV0dGVsIC2W1WV03mFtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte4x19d3256zwn01w96c19dzw4sdw42cl9w1wv0dgvsic2w1wv03mftkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.028] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0199.029] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0199.029] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0199.121] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0199.174] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0199.176] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0199.199] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.210] CloseHandle (hObject=0x1fc) returned 1 [0199.210] CloseHandle (hObject=0x204) returned 1 [0199.210] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\518__connections_cellular_viettel (vietnam)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE4X19D3256ZWN01W96c19DZW4sdW42cl9W1WV0dGVsIC2W1WV03mFtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte4x19d3256zwn01w96c19dzw4sdw42cl9w1wv0dgvsic2w1wv03mftkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0199.211] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE4X19D3256ZWN01W96c19DZW4sdW42cl9W1WV0dGVsIC2W1WV03mFtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte4x19d3256zwn01w96c19dzw4sdw42cl9w1wv0dgvsic2w1wv03mftkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0199.211] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="518__C~1.PRO")) returned 0x7d3018 [0199.211] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="518__C~1.PRO")) returned 0 [0199.211] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0199.211] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\518__connections_cellular_viettel (vietnam)_i0$(__mvid)@wap.provxml")) returned 1 [0199.212] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\518__Connections_Cellular_Viettel (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\518__connections_cellular_viettel (vietnam)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0199.212] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="519__C~1.PRO")) returned 1 [0199.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\519__connections_cellular_vinaphone (vietnam)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.213] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE5X19D3256ZWN01W96c19DZW4sdW42cl9W1W52cG2v3mUgKFZpZXR6YW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte5x19d3256zwn01w96c19dzw4sdw42cl9w1w52cg2v3mugkfzpzxr6yw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.214] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0199.214] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0199.214] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0199.281] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0199.283] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0199.284] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0199.308] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.319] CloseHandle (hObject=0x204) returned 1 [0199.319] CloseHandle (hObject=0x1fc) returned 1 [0199.319] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\519__connections_cellular_vinaphone (vietnam)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE5X19D3256ZWN01W96c19DZW4sdW42cl9W1W52cG2v3mUgKFZpZXR6YW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte5x19d3256zwn01w96c19dzw4sdw42cl9w1w52cg2v3mugkfzpzxr6yw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0199.320] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTE5X19D3256ZWN01W96c19DZW4sdW42cl9W1W52cG2v3mUgKFZpZXR6YW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nte5x19d3256zwn01w96c19dzw4sdw42cl9w1w52cg2v3mugkfzpzxr6yw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0199.320] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="519__C~1.PRO")) returned 0x7d2b98 [0199.320] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912866d8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912866d8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912866d8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="519__C~1.PRO")) returned 0 [0199.321] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0199.321] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\519__connections_cellular_vinaphone (vietnam)_i0$(__mvid)@wap.provxml")) returned 1 [0199.322] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\519__Connections_Cellular_Vinaphone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\519__connections_cellular_vinaphone (vietnam)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0199.322] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="51__CO~1.PRO")) returned 1 [0199.322] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\51__connections_cellular_eronet bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.322] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0Vy325ldCBC33N61WEgKEJvc25pYSB23mQgSGVy7mVn33Zp3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntffx0nv3m5ly3rp325zx0nl3g413gfyx0vy325ldcbc33n61wegkejvc25pysb23mqgsgvy7mvn33zp3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.323] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e1 [0199.323] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0199.323] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0199.401] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e1, lpOverlapped=0x0) returned 1 [0199.534] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0199.535] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0199.564] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.575] CloseHandle (hObject=0x1fc) returned 1 [0199.575] CloseHandle (hObject=0x204) returned 1 [0199.575] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\51__connections_cellular_eronet bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0Vy325ldCBC33N61WEgKEJvc25pYSB23mQgSGVy7mVn33Zp3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntffx0nv3m5ly3rp325zx0nl3g413gfyx0vy325ldcbc33n61wegkejvc25pysb23mqgsgvy7mvn33zp3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0199.576] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0Vy325ldCBC33N61WEgKEJvc25pYSB23mQgSGVy7mVn33Zp3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntffx0nv3m5ly3rp325zx0nl3g413gfyx0vy325ldcbc33n61wegkejvc25pysb23mqgsgvy7mvn33zp3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0199.576] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="51__CO~1.PRO")) returned 0x7d3018 [0199.577] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="51__CO~1.PRO")) returned 0 [0199.577] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0199.577] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\51__connections_cellular_eronet bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml")) returned 1 [0199.578] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\51__Connections_Cellular_Eronet Bosnia (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\51__connections_cellular_eronet bosnia (bosnia and herzegovina)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0199.578] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="520__C~1.PRO")) returned 1 [0199.578] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\520__connections_cellular_vms mobifone (vietnam)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.578] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIwX19D3256ZWN01W96c19DZW4sdW42cl9WTVMgTW9i1UZv3mUgKFZpZXR6YW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntiwx19d3256zwn01w96c19dzw4sdw42cl9wtvmgtw9i1uzv3mugkfzpzxr6yw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.579] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0199.579] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0199.579] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0199.686] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0199.688] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0199.689] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0199.712] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.803] CloseHandle (hObject=0x204) returned 1 [0199.803] CloseHandle (hObject=0x1fc) returned 1 [0199.804] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\520__connections_cellular_vms mobifone (vietnam)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIwX19D3256ZWN01W96c19DZW4sdW42cl9WTVMgTW9i1UZv3mUgKFZpZXR6YW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntiwx19d3256zwn01w96c19dzw4sdw42cl9wtvmgtw9i1uzv3mugkfzpzxr6yw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0199.805] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIwX19D3256ZWN01W96c19DZW4sdW42cl9WTVMgTW9i1UZv3mUgKFZpZXR6YW0pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntiwx19d3256zwn01w96c19dzw4sdw42cl9wtvmgtw9i1uzv3mugkfzpzxr6yw0px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0199.805] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="520__C~1.PRO")) returned 0x7d2998 [0199.805] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml", cAlternateFileName="520__C~1.PRO")) returned 0 [0199.805] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0199.805] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\520__connections_cellular_vms mobifone (vietnam)_i0$(__mvid)@wap.provxml")) returned 1 [0199.806] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\520__Connections_Cellular_VMS MobiFone (Vietnam)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\520__connections_cellular_vms mobifone (vietnam)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0199.806] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml", cAlternateFileName="521__C~1.PRO")) returned 1 [0199.807] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\521__connections_cellular_vodafone (worldwide)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.807] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoV29y3GR31WRlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaov29y3gr31wrlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.807] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0199.808] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0199.808] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0199.875] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0199.877] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0199.878] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0199.901] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0199.913] CloseHandle (hObject=0x1fc) returned 1 [0199.913] CloseHandle (hObject=0x204) returned 1 [0199.913] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\521__connections_cellular_vodafone (worldwide)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoV29y3GR31WRlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaov29y3gr31wrlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0199.914] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoV29y3GR31WRlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaov29y3gr31wrlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0199.914] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml", cAlternateFileName="521__C~1.PRO")) returned 0x7d3018 [0199.914] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml", cAlternateFileName="521__C~1.PRO")) returned 0 [0199.914] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0199.914] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\521__connections_cellular_vodafone (worldwide)_i0$(__mvid)@wap.provxml")) returned 1 [0199.915] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\521__Connections_Cellular_Vodafone (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\521__connections_cellular_vodafone (worldwide)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0199.915] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="522__C~1.PRO")) returned 1 [0199.916] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\522__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0199.916] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntiyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0199.927] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cd [0199.927] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0199.927] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0199.998] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cd, lpOverlapped=0x0) returned 1 [0199.999] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0200.000] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.025] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.037] CloseHandle (hObject=0x204) returned 1 [0200.037] CloseHandle (hObject=0x1fc) returned 1 [0200.037] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\522__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntiyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0200.038] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntiyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0200.039] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="522__C~1.PRO")) returned 0x7d2ad8 [0200.039] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="522__C~1.PRO")) returned 0 [0200.039] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0200.039] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\522__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0200.040] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\522__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\522__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0200.040] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="523__C~1.PRO")) returned 1 [0200.040] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\523__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.041] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntizx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.042] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0200.042] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.042] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.147] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0200.148] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0200.149] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.173] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.184] CloseHandle (hObject=0x1fc) returned 1 [0200.184] CloseHandle (hObject=0x204) returned 1 [0200.185] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\523__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntizx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0200.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTIzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntizx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0200.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="523__C~1.PRO")) returned 0x7d2a58 [0200.186] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="523__C~1.PRO")) returned 0 [0200.186] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0200.186] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\523__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0200.187] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\523__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\523__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0200.187] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml", cAlternateFileName="524__C~1.PRO")) returned 1 [0200.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\524__connections_cellular_sabafon (yemen)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI0X19D3256ZWN01W96c19DZW4sdW42cl9TYWJ2Zm96IC2ZZW1l3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti0x19d3256zwn01w96c19dzw4sdw42cl9tywj2zm96ic2zzw1l3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.188] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c4 [0200.188] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.188] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.254] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c4, lpOverlapped=0x0) returned 1 [0200.256] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0200.257] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.280] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.291] CloseHandle (hObject=0x204) returned 1 [0200.291] CloseHandle (hObject=0x1fc) returned 1 [0200.291] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\524__connections_cellular_sabafon (yemen)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI0X19D3256ZWN01W96c19DZW4sdW42cl9TYWJ2Zm96IC2ZZW1l3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti0x19d3256zwn01w96c19dzw4sdw42cl9tywj2zm96ic2zzw1l3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0200.292] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI0X19D3256ZWN01W96c19DZW4sdW42cl9TYWJ2Zm96IC2ZZW1l3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti0x19d3256zwn01w96c19dzw4sdw42cl9tywj2zm96ic2zzw1l3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0200.292] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml", cAlternateFileName="524__C~1.PRO")) returned 0x7d2998 [0200.292] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml", cAlternateFileName="524__C~1.PRO")) returned 0 [0200.292] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0200.293] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\524__connections_cellular_sabafon (yemen)_i0$(__mvid)@wap.provxml")) returned 1 [0200.295] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\524__Connections_Cellular_Sabafon (Yemen)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\524__connections_cellular_sabafon (yemen)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0200.295] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="525__C~1.PRO")) returned 1 [0200.295] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\525__connections_cellular_idea (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.295] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI1X19D3256ZWN01W96c19DZW4sdW42cl9JZGV2IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti1x19d3256zwn01w96c19dzw4sdw42cl9jzgv2ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.296] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0200.296] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.296] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.394] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0200.395] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0200.396] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.419] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.430] CloseHandle (hObject=0x1fc) returned 1 [0200.430] CloseHandle (hObject=0x204) returned 1 [0200.431] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\525__connections_cellular_idea (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI1X19D3256ZWN01W96c19DZW4sdW42cl9JZGV2IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti1x19d3256zwn01w96c19dzw4sdw42cl9jzgv2ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0200.432] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI1X19D3256ZWN01W96c19DZW4sdW42cl9JZGV2IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti1x19d3256zwn01w96c19dzw4sdw42cl9jzgv2ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0200.432] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="525__C~1.PRO")) returned 0x7d2c18 [0200.432] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912ac947, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912ac947, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912ac947, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="525__C~1.PRO")) returned 0 [0200.432] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0200.432] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\525__connections_cellular_idea (india)_i0$(__mvid)@wap.provxml")) returned 1 [0200.433] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\525__Connections_Cellular_Idea (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\525__connections_cellular_idea (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0200.433] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="526__C~1.PRO")) returned 1 [0200.433] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\526__connections_cellular_mtnl (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.434] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI2X19D3256ZWN01W96c19DZW4sdW42cl9NVE5MIC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti2x19d3256zwn01w96c19dzw4sdw42cl9nve5mic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.434] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27d [0200.434] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.435] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.501] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x27d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x27d, lpOverlapped=0x0) returned 1 [0200.504] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0200.505] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.539] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.561] CloseHandle (hObject=0x204) returned 1 [0200.561] CloseHandle (hObject=0x1fc) returned 1 [0200.567] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\526__connections_cellular_mtnl (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI2X19D3256ZWN01W96c19DZW4sdW42cl9NVE5MIC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti2x19d3256zwn01w96c19dzw4sdw42cl9nve5mic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0200.568] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI2X19D3256ZWN01W96c19DZW4sdW42cl9NVE5MIC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti2x19d3256zwn01w96c19dzw4sdw42cl9nve5mic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0200.568] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="526__C~1.PRO")) returned 0x7d2b58 [0200.568] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="526__C~1.PRO")) returned 0 [0200.568] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0200.569] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\526__connections_cellular_mtnl (india)_i0$(__mvid)@wap.provxml")) returned 1 [0200.570] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\526__Connections_Cellular_MTNL (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\526__connections_cellular_mtnl (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0200.570] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="527__C~1.PRO")) returned 1 [0200.570] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\527__connections_cellular_reliance communication (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.570] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI3X19D3256ZWN01W96c19DZW4sdW42cl9SZW4pYW5jZSBD321tdW5pY2F01W96IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti3x19d3256zwn01w96c19dzw4sdw42cl9szw4pyw5jzsbd321tdw5py2f01w96ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.571] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0200.571] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.571] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.638] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0200.640] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0200.641] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.664] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.685] CloseHandle (hObject=0x1fc) returned 1 [0200.685] CloseHandle (hObject=0x204) returned 1 [0200.685] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\527__connections_cellular_reliance communication (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI3X19D3256ZWN01W96c19DZW4sdW42cl9SZW4pYW5jZSBD321tdW5pY2F01W96IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti3x19d3256zwn01w96c19dzw4sdw42cl9szw4pyw5jzsbd321tdw5py2f01w96ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0200.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI3X19D3256ZWN01W96c19DZW4sdW42cl9SZW4pYW5jZSBD321tdW5pY2F01W96IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti3x19d3256zwn01w96c19dzw4sdw42cl9szw4pyw5jzsbd321tdw5py2f01w96ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0200.686] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="527__C~1.PRO")) returned 0x7d2b18 [0200.687] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="527__C~1.PRO")) returned 0 [0200.687] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0200.687] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\527__connections_cellular_reliance communication (india)_i0$(__mvid)@wap.provxml")) returned 1 [0200.688] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\527__Connections_Cellular_Reliance Communication (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\527__connections_cellular_reliance communication (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0200.688] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="528__C~1.PRO")) returned 1 [0200.690] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\528__connections_cellular_vodafone in (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.690] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJTiAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjtiaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.691] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0200.691] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.691] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.809] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0200.810] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0200.811] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.835] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.846] CloseHandle (hObject=0x204) returned 1 [0200.846] CloseHandle (hObject=0x1fc) returned 1 [0200.846] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\528__connections_cellular_vodafone in (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJTiAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjtiaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0200.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJTiAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjtiaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0200.847] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="528__C~1.PRO")) returned 0x7d2b98 [0200.847] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="528__C~1.PRO")) returned 0 [0200.848] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0200.848] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\528__connections_cellular_vodafone in (india)_i0$(__mvid)@wap.provxml")) returned 1 [0200.849] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\528__Connections_Cellular_Vodafone IN (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\528__connections_cellular_vodafone in (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0200.849] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="529__C~1.PRO")) returned 1 [0200.849] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\529__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.849] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.850] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0200.850] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.850] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0200.914] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0200.916] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0200.917] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0200.940] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0200.954] CloseHandle (hObject=0x1fc) returned 1 [0200.954] CloseHandle (hObject=0x204) returned 1 [0200.954] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\529__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0200.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTI5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nti5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0200.955] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="529__C~1.PRO")) returned 0x7d3018 [0200.955] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912d2bb2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912d2bb2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912d2bb2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="529__C~1.PRO")) returned 0 [0200.955] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0200.955] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\529__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0200.956] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\529__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\529__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0200.956] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="52__CO~1.PRO")) returned 1 [0200.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\52__connections_cellular_tele2 (bosnia and herzegovina)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0200.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2C33N61WEgYW55IE2lcnplZ2921W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2c33n61wegyw55ie2lcnplz2921w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0200.957] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x291 [0200.957] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0200.958] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.025] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x291, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x291, lpOverlapped=0x0) returned 1 [0201.026] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0201.027] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.052] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.063] CloseHandle (hObject=0x204) returned 1 [0201.063] CloseHandle (hObject=0x1fc) returned 1 [0201.064] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\52__connections_cellular_tele2 (bosnia and herzegovina)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2C33N61WEgYW55IE2lcnplZ2921W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2c33n61wegyw55ie2lcnplz2921w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0201.065] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2C33N61WEgYW55IE2lcnplZ2921W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2c33n61wegyw55ie2lcnplz2921w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0201.065] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="52__CO~1.PRO")) returned 0x7d2ad8 [0201.065] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="52__CO~1.PRO")) returned 0 [0201.065] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0201.065] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\52__connections_cellular_tele2 (bosnia and herzegovina)_i0$(__mvid)@wap.provxml")) returned 1 [0201.066] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\52__Connections_Cellular_Tele2 (Bosnia and Herzegovina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\52__connections_cellular_tele2 (bosnia and herzegovina)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.066] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="530__C~1.PRO")) returned 1 [0201.066] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\530__connections_cellular_axis (indonesia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.067] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMwX19D3256ZWN01W96c19DZW4sdW42cl9B7GlzIC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmwx19d3256zwn01w96c19dzw4sdw42cl9b7glzic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.067] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x300 [0201.067] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.068] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.161] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x300, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0201.164] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0201.165] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.188] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.198] CloseHandle (hObject=0x1fc) returned 1 [0201.198] CloseHandle (hObject=0x204) returned 1 [0201.199] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\530__connections_cellular_axis (indonesia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMwX19D3256ZWN01W96c19DZW4sdW42cl9B7GlzIC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmwx19d3256zwn01w96c19dzw4sdw42cl9b7glzic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0201.202] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMwX19D3256ZWN01W96c19DZW4sdW42cl9B7GlzIC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmwx19d3256zwn01w96c19dzw4sdw42cl9b7glzic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0201.202] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="530__C~1.PRO")) returned 0x7d2b58 [0201.202] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="530__C~1.PRO")) returned 0 [0201.202] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0201.202] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\530__connections_cellular_axis (indonesia)_i0$(__mvid)@wap.provxml")) returned 1 [0201.203] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\530__Connections_Cellular_Axis (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\530__connections_cellular_axis (indonesia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.203] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="531__C~1.PRO")) returned 1 [0201.204] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\531__connections_cellular_im3 (indonesia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.204] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM4X19D3256ZWN01W96c19DZW4sdW42cl9JTTMgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm4x19d3256zwn01w96c19dzw4sdw42cl9jttmgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.205] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0201.205] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.205] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.271] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0201.273] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0201.274] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.298] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.309] CloseHandle (hObject=0x204) returned 1 [0201.309] CloseHandle (hObject=0x1fc) returned 1 [0201.310] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\531__connections_cellular_im3 (indonesia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM4X19D3256ZWN01W96c19DZW4sdW42cl9JTTMgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm4x19d3256zwn01w96c19dzw4sdw42cl9jttmgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0201.311] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM4X19D3256ZWN01W96c19DZW4sdW42cl9JTTMgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm4x19d3256zwn01w96c19dzw4sdw42cl9jttmgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0201.311] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="531__C~1.PRO")) returned 0x7d3098 [0201.311] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="531__C~1.PRO")) returned 0 [0201.311] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0201.311] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\531__connections_cellular_im3 (indonesia)_i0$(__mvid)@wap.provxml")) returned 1 [0201.312] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\531__Connections_Cellular_IM3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\531__connections_cellular_im3 (indonesia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.312] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="532__C~1.PRO")) returned 1 [0201.312] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\532__connections_cellular_orange (armenia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.313] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEFy3WV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkefy3wv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.313] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x30b [0201.313] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.314] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.410] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x30b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x30b, lpOverlapped=0x0) returned 1 [0201.411] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0201.412] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.436] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.447] CloseHandle (hObject=0x1fc) returned 1 [0201.447] CloseHandle (hObject=0x204) returned 1 [0201.448] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\532__connections_cellular_orange (armenia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEFy3WV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkefy3wv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0201.448] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEFy3WV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkefy3wv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0201.449] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="532__C~1.PRO")) returned 0x7d2a58 [0201.449] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="532__C~1.PRO")) returned 0 [0201.449] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0201.449] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\532__connections_cellular_orange (armenia)_i0$(__mvid)@wap.provxml")) returned 1 [0201.450] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\532__Connections_Cellular_Orange (Armenia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\532__connections_cellular_orange (armenia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.450] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x0, cFileName="533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="533__C~1.PRO")) returned 1 [0201.450] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\533__connections_cellular_orange la réunion (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.451] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgTGEgU6l13mlv3iAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugtgegu6l13mlv3iaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.451] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x363 [0201.451] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.452] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.519] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x363, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x363, lpOverlapped=0x0) returned 1 [0201.522] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0201.523] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.547] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.561] CloseHandle (hObject=0x204) returned 1 [0201.562] CloseHandle (hObject=0x1fc) returned 1 [0201.562] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\533__connections_cellular_orange la réunion (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgTGEgU6l13mlv3iAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugtgegu6l13mlv3iaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0201.563] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTMzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgTGEgU6l13mlv3iAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntmzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugtgegu6l13mlv3iaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0201.563] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="533__C~1.PRO")) returned 0x7d3018 [0201.563] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x912f8e1e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x912f8e1e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x912f8e1e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="533__C~1.PRO")) returned 0 [0201.563] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0201.563] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\533__connections_cellular_orange la réunion (france)_i0$(__mvid)@wap.provxml")) returned 1 [0201.564] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\533__Connections_Cellular_Orange La Réunion (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\533__connections_cellular_orange la réunion (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.564] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="534__C~1.PRO")) returned 1 [0201.564] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\534__connections_cellular_orange la réunion (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.565] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgTGEgU6l13mlv3iAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugtgegu6l13mlv3iaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.566] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x356 [0201.566] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.566] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.639] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x356, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x356, lpOverlapped=0x0) returned 1 [0201.641] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0201.642] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.664] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.684] CloseHandle (hObject=0x1fc) returned 1 [0201.684] CloseHandle (hObject=0x204) returned 1 [0201.684] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\534__connections_cellular_orange la réunion (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgTGEgU6l13mlv3iAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugtgegu6l13mlv3iaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0201.685] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgTGEgU6l13mlv3iAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugtgegu6l13mlv3iaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0201.685] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="534__C~1.PRO")) returned 0x7d3018 [0201.685] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="534__C~1.PRO")) returned 0 [0201.685] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0201.685] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\534__connections_cellular_orange la réunion (france)_i1$(__mvid)@wap.provxml")) returned 1 [0201.687] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\534__Connections_Cellular_Orange La Réunion (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\534__connections_cellular_orange la réunion (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0201.688] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml", cAlternateFileName="535__C~1.PRO")) returned 1 [0201.688] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\535__connections_cellular_orange (moldova)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.688] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE1v3GRvdmEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke1v3grvdmepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.689] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0201.689] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.689] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.834] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0201.835] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0201.836] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.861] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.871] CloseHandle (hObject=0x204) returned 1 [0201.872] CloseHandle (hObject=0x1fc) returned 1 [0201.872] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\535__connections_cellular_orange (moldova)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE1v3GRvdmEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke1v3grvdmepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0201.873] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE1v3GRvdmEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke1v3grvdmepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0201.873] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml", cAlternateFileName="535__C~1.PRO")) returned 0x7d2c98 [0201.873] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml", cAlternateFileName="535__C~1.PRO")) returned 0 [0201.873] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0201.873] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\535__connections_cellular_orange (moldova)_i0$(__mvid)@wap.provxml")) returned 1 [0201.874] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\535__Connections_Cellular_Orange (Moldova)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\535__connections_cellular_orange (moldova)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.874] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x0, cFileName="536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="536__C~1.PRO")) returned 1 [0201.875] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\536__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.875] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNwYWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnwywl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.876] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x348 [0201.876] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.876] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0201.943] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x348, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x348, lpOverlapped=0x0) returned 1 [0201.945] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0201.946] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0201.970] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0201.981] CloseHandle (hObject=0x1fc) returned 1 [0201.981] CloseHandle (hObject=0x204) returned 1 [0201.981] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\536__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNwYWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnwywl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0201.982] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNwYWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnwywl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0201.982] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="536__C~1.PRO")) returned 0x7d2a18 [0201.982] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9131f086, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x348, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="536__C~1.PRO")) returned 0 [0201.982] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0201.982] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\536__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0201.984] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\536__Connections_Cellular_Orange (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\536__connections_cellular_orange (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0201.985] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="537__C~1.PRO")) returned 1 [0201.985] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\537__connections_cellular_orange (botswana)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0201.985] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEJvdHN3YW52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkejvdhn3yw52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0201.986] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0201.986] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0201.987] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.054] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0202.055] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0202.056] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.082] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.093] CloseHandle (hObject=0x204) returned 1 [0202.093] CloseHandle (hObject=0x1fc) returned 1 [0202.094] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\537__connections_cellular_orange (botswana)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEJvdHN3YW52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkejvdhn3yw52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0202.095] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEJvdHN3YW52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkejvdhn3yw52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0202.095] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="537__C~1.PRO")) returned 0x7d2ad8 [0202.095] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9131f086, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9131f086, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="537__C~1.PRO")) returned 0 [0202.095] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0202.095] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\537__connections_cellular_orange (botswana)_i0$(__mvid)@wap.provxml")) returned 1 [0202.096] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\537__Connections_Cellular_Orange (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\537__connections_cellular_orange (botswana)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0202.096] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="538__C~1.PRO")) returned 1 [0202.096] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\538__connections_cellular_orange (cameroon)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.097] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEN23WVy3296KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugken23wvy3296kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.097] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34f [0202.097] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.098] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.192] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34f, lpOverlapped=0x0) returned 1 [0202.194] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0202.195] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.217] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.229] CloseHandle (hObject=0x1fc) returned 1 [0202.229] CloseHandle (hObject=0x204) returned 1 [0202.229] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\538__connections_cellular_orange (cameroon)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEN23WVy3296KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugken23wvy3296kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0202.230] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEN23WVy3296KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugken23wvy3296kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0202.230] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="538__C~1.PRO")) returned 0x7d2998 [0202.230] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="538__C~1.PRO")) returned 0 [0202.230] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0202.230] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\538__connections_cellular_orange (cameroon)_i0$(__mvid)@wap.provxml")) returned 1 [0202.231] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\538__Connections_Cellular_Orange (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\538__connections_cellular_orange (cameroon)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0202.231] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="539__C~1.PRO")) returned 1 [0202.232] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\539__connections_cellular_orange (central african republic)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.232] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKENl3nRyYWwgQWZy1WN23iBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkenl3nryywwgqwzy1wn23ibszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.232] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0202.233] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.233] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.302] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0202.304] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0202.305] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.328] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.338] CloseHandle (hObject=0x204) returned 1 [0202.338] CloseHandle (hObject=0x1fc) returned 1 [0202.339] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\539__connections_cellular_orange (central african republic)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKENl3nRyYWwgQWZy1WN23iBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkenl3nryywwgqwzy1wn23ibszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0202.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKENl3nRyYWwgQWZy1WN23iBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkenl3nryywwgqwzy1wn23ibszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0202.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="539__C~1.PRO")) returned 0x7d2ad8 [0202.340] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="539__C~1.PRO")) returned 0 [0202.340] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0202.340] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\539__connections_cellular_orange (central african republic)_i0$(__mvid)@wap.provxml")) returned 1 [0202.341] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\539__Connections_Cellular_Orange (Central African Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\539__connections_cellular_orange (central african republic)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0202.341] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="53__CO~1.PRO")) returned 1 [0202.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\53__connections_cellular_mascom wireless (botswana)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX012c2Nv3SBX1XJl3GVzcyAoQm90c3d23mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntnfx0nv3m5ly3rp325zx0nl3g413gfyx012c2nv3sbx1xjl3gvzcyaoqm90c3d23mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.345] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0202.345] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.345] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.442] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0202.444] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0202.445] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.468] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.479] CloseHandle (hObject=0x1fc) returned 1 [0202.479] CloseHandle (hObject=0x204) returned 1 [0202.479] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\53__connections_cellular_mascom wireless (botswana)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX012c2Nv3SBX1XJl3GVzcyAoQm90c3d23mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntnfx0nv3m5ly3rp325zx0nl3g413gfyx012c2nv3sbx1xjl3gvzcyaoqm90c3d23mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0202.480] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX012c2Nv3SBX1XJl3GVzcyAoQm90c3d23mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntnfx0nv3m5ly3rp325zx0nl3g413gfyx012c2nv3sbx1xjl3gvzcyaoqm90c3d23mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0202.480] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="53__CO~1.PRO")) returned 0x7d2998 [0202.480] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902943e8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902943e8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902943e8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="53__CO~1.PRO")) returned 0 [0202.480] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0202.480] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\53__connections_cellular_mascom wireless (botswana)_i0$(__mvid)@wap.provxml")) returned 1 [0202.481] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\53__Connections_Cellular_Mascom Wireless (Botswana)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\53__connections_cellular_mascom wireless (botswana)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0202.481] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="540__C~1.PRO")) returned 1 [0202.482] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\540__connections_cellular_orange (dominican republic)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.482] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKERv3Wl61WN23iBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkerv3wl61wn23ibszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.483] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0202.483] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.484] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.551] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0202.553] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0202.554] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.577] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.587] CloseHandle (hObject=0x204) returned 1 [0202.588] CloseHandle (hObject=0x1fc) returned 1 [0202.588] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\540__connections_cellular_orange (dominican republic)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKERv3Wl61WN23iBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkerv3wl61wn23ibszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0202.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKERv3Wl61WN23iBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkerv3wl61wn23ibszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0202.589] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="540__C~1.PRO")) returned 0x7d2b58 [0202.589] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913452f1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913452f1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913452f1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="540__C~1.PRO")) returned 0 [0202.589] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0202.589] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\540__connections_cellular_orange (dominican republic)_i0$(__mvid)@wap.provxml")) returned 1 [0202.590] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\540__Connections_Cellular_Orange (Dominican Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\540__connections_cellular_orange (dominican republic)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0202.590] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="541__C~1.PRO")) returned 1 [0202.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\541__connections_cellular_orange (equatorial guinea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.593] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEV4dWF033JpYWwgR3Vp3mV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkev4dwf033jpywwgr3vp3mv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.594] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35b [0202.594] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.595] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.659] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35b, lpOverlapped=0x0) returned 1 [0202.661] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0202.662] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.695] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.706] CloseHandle (hObject=0x1fc) returned 1 [0202.706] CloseHandle (hObject=0x204) returned 1 [0202.707] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\541__connections_cellular_orange (equatorial guinea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEV4dWF033JpYWwgR3Vp3mV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkev4dwf033jpywwgr3vp3mv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0202.707] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEV4dWF033JpYWwgR3Vp3mV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkev4dwf033jpywwgr3vp3mv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0202.708] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="541__C~1.PRO")) returned 0x7d2a18 [0202.708] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="541__C~1.PRO")) returned 0 [0202.708] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0202.708] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\541__connections_cellular_orange (equatorial guinea)_i0$(__mvid)@wap.provxml")) returned 1 [0202.709] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\541__Connections_Cellular_Orange (Equatorial Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\541__connections_cellular_orange (equatorial guinea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0202.709] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml", cAlternateFileName="542__C~1.PRO")) returned 1 [0202.709] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\542__connections_cellular_orange (equatorial guinea)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.710] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEV4dWF033JpYWwgR3Vp3mV2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkev4dwf033jpywwgr3vp3mv2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.710] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34f [0202.710] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.711] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.824] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34f, lpOverlapped=0x0) returned 1 [0202.826] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0202.827] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.850] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0202.861] CloseHandle (hObject=0x204) returned 1 [0202.862] CloseHandle (hObject=0x1fc) returned 1 [0202.862] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\542__connections_cellular_orange (equatorial guinea)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEV4dWF033JpYWwgR3Vp3mV2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkev4dwf033jpywwgr3vp3mv2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0202.863] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEV4dWF033JpYWwgR3Vp3mV2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkev4dwf033jpywwgr3vp3mv2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0202.863] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml", cAlternateFileName="542__C~1.PRO")) returned 0x7d2918 [0202.863] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml", cAlternateFileName="542__C~1.PRO")) returned 0 [0202.863] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0202.863] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\542__connections_cellular_orange (equatorial guinea)_i1$(__mvid)@wap.provxml")) returned 1 [0202.864] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\542__Connections_Cellular_Orange (Equatorial Guinea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\542__connections_cellular_orange (equatorial guinea)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0202.864] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="543__C~1.PRO")) returned 1 [0202.867] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\543__connections_cellular_orange (guinea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0202.867] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEd11W5lYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugked11w5lyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0202.868] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0202.868] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0202.868] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0202.936] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0202.937] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0202.938] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0202.962] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.015] CloseHandle (hObject=0x1fc) returned 1 [0203.015] CloseHandle (hObject=0x204) returned 1 [0203.016] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\543__connections_cellular_orange (guinea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEd11W5lYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugked11w5lyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0203.017] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEd11W5lYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugked11w5lyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0203.017] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="543__C~1.PRO")) returned 0x7d3018 [0203.017] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="543__C~1.PRO")) returned 0 [0203.017] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0203.017] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\543__connections_cellular_orange (guinea)_i0$(__mvid)@wap.provxml")) returned 1 [0203.018] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\543__Connections_Cellular_Orange (Guinea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\543__connections_cellular_orange (guinea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0203.018] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml", cAlternateFileName="544__C~1.PRO")) returned 1 [0203.018] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\544__connections_cellular_orange (guinea-bissau)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.019] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEd11W5lYS1C1XNzYXUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugked11w5lys1c1xnzyxupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.019] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0203.019] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.020] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.127] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0203.129] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0203.130] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.153] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.164] CloseHandle (hObject=0x204) returned 1 [0203.164] CloseHandle (hObject=0x1fc) returned 1 [0203.164] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\544__connections_cellular_orange (guinea-bissau)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEd11W5lYS1C1XNzYXUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugked11w5lys1c1xnzyxupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0203.165] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEd11W5lYS1C1XNzYXUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugked11w5lys1c1xnzyxupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0203.165] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml", cAlternateFileName="544__C~1.PRO")) returned 0x7d3018 [0203.166] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9136b55d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9136b55d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9136b55d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml", cAlternateFileName="544__C~1.PRO")) returned 0 [0203.166] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0203.166] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\544__connections_cellular_orange (guinea-bissau)_i0$(__mvid)@wap.provxml")) returned 1 [0203.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\544__Connections_Cellular_Orange (Guinea-Bissau)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\544__connections_cellular_orange (guinea-bissau)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0203.167] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913917c8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913917c8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913917c8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml", cAlternateFileName="545__C~1.PRO")) returned 1 [0203.167] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\545__connections_cellular_orange (côte d\x92ivoire)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.168] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.169] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0203.169] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.170] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.237] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0203.239] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0203.240] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.263] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.274] CloseHandle (hObject=0x1fc) returned 1 [0203.274] CloseHandle (hObject=0x204) returned 1 [0203.274] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\545__connections_cellular_orange (côte d\x92ivoire)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0203.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0203.275] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913917c8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913917c8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913917c8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml", cAlternateFileName="545__C~1.PRO")) returned 0x7d2998 [0203.275] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913917c8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913917c8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913917c8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml", cAlternateFileName="545__C~1.PRO")) returned 0 [0203.275] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0203.275] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\545__connections_cellular_orange (côte d\x92ivoire)_i0$(__mvid)@wap.provxml")) returned 1 [0203.276] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\545__Connections_Cellular_Orange (Côte d\x92Ivoire)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\545__connections_cellular_orange (côte d\x92ivoire)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0203.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913917c8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913917c8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913917c8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x0, cFileName="546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml", cAlternateFileName="546__C~1.PRO")) returned 1 [0203.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\546__connections_cellular_orange (côte d\x92ivoire)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.277] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0203.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.278] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.357] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0203.359] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0203.363] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.387] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.399] CloseHandle (hObject=0x204) returned 1 [0203.399] CloseHandle (hObject=0x1fc) returned 1 [0203.399] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\546__connections_cellular_orange (côte d\x92ivoire)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0203.400] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0203.400] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913917c8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913917c8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913917c8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml", cAlternateFileName="546__C~1.PRO")) returned 0x7d3098 [0203.400] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913917c8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913917c8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913917c8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml", cAlternateFileName="546__C~1.PRO")) returned 0 [0203.400] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0203.400] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\546__connections_cellular_orange (côte d\x92ivoire)_i1$(__mvid)@wap.provxml")) returned 1 [0203.401] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\546__Connections_Cellular_Orange (Côte d\x92Ivoire)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\546__connections_cellular_orange (côte d\x92ivoire)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0203.401] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x0, cFileName="547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml", cAlternateFileName="547__C~1.PRO")) returned 1 [0203.402] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\547__connections_cellular_orange (côte d\x92ivoire)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.402] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.403] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x355 [0203.403] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.403] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.503] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x355, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x355, lpOverlapped=0x0) returned 1 [0203.504] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0203.505] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.527] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.541] CloseHandle (hObject=0x1fc) returned 1 [0203.541] CloseHandle (hObject=0x204) returned 1 [0203.541] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\547__connections_cellular_orange (côte d\x92ivoire)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0203.542] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0203.542] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml", cAlternateFileName="547__C~1.PRO")) returned 0x7d3018 [0203.543] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x355, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml", cAlternateFileName="547__C~1.PRO")) returned 0 [0203.543] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0203.543] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\547__connections_cellular_orange (côte d\x92ivoire)_i2$(__mvid)@wap.provxml")) returned 1 [0203.544] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\547__Connections_Cellular_Orange (Côte d\x92Ivoire)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\547__connections_cellular_orange (côte d\x92ivoire)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0203.544] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml", cAlternateFileName="548__C~1.PRO")) returned 1 [0203.544] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\548__connections_cellular_orange (côte d\x92ivoire)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.545] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.546] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x352 [0203.546] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.546] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.614] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x352, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x352, lpOverlapped=0x0) returned 1 [0203.616] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0203.617] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.650] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.661] CloseHandle (hObject=0x204) returned 1 [0203.661] CloseHandle (hObject=0x1fc) returned 1 [0203.662] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\548__connections_cellular_orange (côte d\x92ivoire)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0203.663] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEP0dGUgZJJJdm9pcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkep0dgugzjjjdm9pcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0203.663] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml", cAlternateFileName="548__C~1.PRO")) returned 0x7d3018 [0203.664] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml", cAlternateFileName="548__C~1.PRO")) returned 0 [0203.664] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0203.664] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\548__connections_cellular_orange (côte d\x92ivoire)_i3$(__mvid)@wap.provxml")) returned 1 [0203.665] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\548__Connections_Cellular_Orange (Côte d\x92Ivoire)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\548__connections_cellular_orange (côte d\x92ivoire)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0203.665] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="549__C~1.PRO")) returned 1 [0203.665] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\549__connections_cellular_orange (kenya)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.666] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.666] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0203.666] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.667] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.809] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0203.811] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0203.812] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.842] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.853] CloseHandle (hObject=0x1fc) returned 1 [0203.853] CloseHandle (hObject=0x204) returned 1 [0203.853] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\549__connections_cellular_orange (kenya)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0203.854] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTQ5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntq5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0203.854] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="549__C~1.PRO")) returned 0x7d3018 [0203.854] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="549__C~1.PRO")) returned 0 [0203.854] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0203.854] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\549__connections_cellular_orange (kenya)_i0$(__mvid)@wap.provxml")) returned 1 [0203.855] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\549__Connections_Cellular_Orange (Kenya)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\549__connections_cellular_orange (kenya)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0203.856] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="54__CO~1.PRO")) returned 1 [0203.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\54__connections_cellular_ctbc (brazil)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.856] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NUQ5MgKEJyYXpp3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntrfx0nv3m5ly3rp325zx0nl3g413gfyx0nuq5mgkejyyxpp3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.857] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0203.857] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.857] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0203.925] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0203.926] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0203.927] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0203.950] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0203.962] CloseHandle (hObject=0x204) returned 1 [0203.962] CloseHandle (hObject=0x1fc) returned 1 [0203.962] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\54__connections_cellular_ctbc (brazil)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NUQ5MgKEJyYXpp3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntrfx0nv3m5ly3rp325zx0nl3g413gfyx0nuq5mgkejyyxpp3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0203.963] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NUQ5MgKEJyYXpp3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntrfx0nv3m5ly3rp325zx0nl3g413gfyx0nuq5mgkejyyxpp3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0203.963] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="54__CO~1.PRO")) returned 0x7d2c98 [0203.963] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="54__CO~1.PRO")) returned 0 [0203.963] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0203.964] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\54__connections_cellular_ctbc (brazil)_i0$(__mvid)@wap.provxml")) returned 1 [0203.965] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\54__Connections_Cellular_CTBC (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\54__connections_cellular_ctbc (brazil)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0203.965] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="550__C~1.PRO")) returned 1 [0203.965] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\550__connections_cellular_orange (madagascar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0203.965] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE12ZGFnYXNjYXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke12zgfnyxnjyxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0203.966] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0203.966] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0203.966] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.130] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0204.131] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0204.132] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0204.159] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.170] CloseHandle (hObject=0x1fc) returned 1 [0204.170] CloseHandle (hObject=0x204) returned 1 [0204.170] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\550__connections_cellular_orange (madagascar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE12ZGFnYXNjYXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke12zgfnyxnjyxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0204.171] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE12ZGFnYXNjYXIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke12zgfnyxnjyxipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0204.171] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="550__C~1.PRO")) returned 0x7d3018 [0204.171] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913b7a34, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913b7a34, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913b7a34, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml", cAlternateFileName="550__C~1.PRO")) returned 0 [0204.171] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0204.171] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\550__connections_cellular_orange (madagascar)_i0$(__mvid)@wap.provxml")) returned 1 [0204.172] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\550__Connections_Cellular_Orange (Madagascar)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\550__connections_cellular_orange (madagascar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0204.172] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x0, cFileName="551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml", cAlternateFileName="551__C~1.PRO")) returned 1 [0204.173] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\551__connections_cellular_orange (mali)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.173] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE123G5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke123g5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0204.174] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x33c [0204.174] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0204.174] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.244] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x33c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x33c, lpOverlapped=0x0) returned 1 [0204.245] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x340, lpOverlapped=0x0) returned 1 [0204.246] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0204.271] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.282] CloseHandle (hObject=0x204) returned 1 [0204.282] CloseHandle (hObject=0x1fc) returned 1 [0204.282] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\551__connections_cellular_orange (mali)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE123G5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke123g5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0204.283] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE123G5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke123g5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0204.283] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml", cAlternateFileName="551__C~1.PRO")) returned 0x7d3018 [0204.283] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml", cAlternateFileName="551__C~1.PRO")) returned 0 [0204.283] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0204.284] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\551__connections_cellular_orange (mali)_i0$(__mvid)@wap.provxml")) returned 1 [0204.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\551__Connections_Cellular_Orange (Mali)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\551__connections_cellular_orange (mali)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0204.285] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml", cAlternateFileName="552__C~1.PRO")) returned 1 [0204.285] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\552__connections_cellular_orange (mali)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0204.285] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE123G5pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke123g5px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.286] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x347 [0204.286] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0204.286] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.353] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x347, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x347, lpOverlapped=0x0) returned 1 [0204.354] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0204.355] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0204.378] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.390] CloseHandle (hObject=0x1fc) returned 1 [0204.390] CloseHandle (hObject=0x204) returned 1 [0204.390] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\552__connections_cellular_orange (mali)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE123G5pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke123g5px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0204.391] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE123G5pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke123g5px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0204.391] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml", cAlternateFileName="552__C~1.PRO")) returned 0x7d2c18 [0204.391] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x347, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml", cAlternateFileName="552__C~1.PRO")) returned 0 [0204.391] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0204.391] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\552__connections_cellular_orange (mali)_i1$(__mvid)@wap.provxml")) returned 1 [0204.392] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\552__Connections_Cellular_Orange (Mali)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\552__connections_cellular_orange (mali)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0204.392] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml", cAlternateFileName="553__C~1.PRO")) returned 1 [0204.392] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\553__connections_cellular_orange (mauritius)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.393] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE12dXJpdGl1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke12dxjpdgl1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0204.393] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0204.393] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0204.394] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.496] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0204.497] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0204.498] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0204.564] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.577] CloseHandle (hObject=0x204) returned 1 [0204.577] CloseHandle (hObject=0x1fc) returned 1 [0204.577] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\553__connections_cellular_orange (mauritius)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE12dXJpdGl1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke12dxjpdgl1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0204.578] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTUzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE12dXJpdGl1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntuzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke12dxjpdgl1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0204.578] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml", cAlternateFileName="553__C~1.PRO")) returned 0x7d3018 [0204.578] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml", cAlternateFileName="553__C~1.PRO")) returned 0 [0204.578] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0204.578] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\553__connections_cellular_orange (mauritius)_i0$(__mvid)@wap.provxml")) returned 1 [0204.579] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\553__Connections_Cellular_Orange (Mauritius)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\553__connections_cellular_orange (mauritius)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0204.579] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="554__C~1.PRO")) returned 1 [0204.580] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\554__connections_cellular_meditel (morocco)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0204.580] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU0X19D3256ZWN01W96c19DZW4sdW42cl9NZWRpdGVsIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu0x19d3256zwn01w96c19dzw4sdw42cl9nzwrpdgvsic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.580] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x352 [0204.581] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0204.581] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.699] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x352, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x352, lpOverlapped=0x0) returned 1 [0204.701] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0204.703] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0204.727] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.787] CloseHandle (hObject=0x1fc) returned 1 [0204.788] CloseHandle (hObject=0x204) returned 1 [0204.788] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\554__connections_cellular_meditel (morocco)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU0X19D3256ZWN01W96c19DZW4sdW42cl9NZWRpdGVsIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu0x19d3256zwn01w96c19dzw4sdw42cl9nzwrpdgvsic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0204.789] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU0X19D3256ZWN01W96c19DZW4sdW42cl9NZWRpdGVsIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu0x19d3256zwn01w96c19dzw4sdw42cl9nzwrpdgvsic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0204.789] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="554__C~1.PRO")) returned 0x7d2998 [0204.789] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x913ddca3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x913ddca3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x913ddca3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="554__C~1.PRO")) returned 0 [0204.789] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0204.789] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\554__connections_cellular_meditel (morocco)_i0$(__mvid)@wap.provxml")) returned 1 [0204.790] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\554__Connections_Cellular_Meditel (Morocco)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\554__connections_cellular_meditel (morocco)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0204.790] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml", cAlternateFileName="555__C~1.PRO")) returned 1 [0204.791] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\555__connections_cellular_orange (niger)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.791] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE5pZ2VyKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke5pz2vykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0204.792] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0204.792] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0204.792] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.863] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0204.865] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0204.867] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0204.891] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0204.902] CloseHandle (hObject=0x204) returned 1 [0204.902] CloseHandle (hObject=0x1fc) returned 1 [0204.903] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\555__connections_cellular_orange (niger)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE5pZ2VyKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke5pz2vykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0204.904] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE5pZ2VyKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke5pz2vykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0204.904] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml", cAlternateFileName="555__C~1.PRO")) returned 0x7d2c18 [0204.904] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml", cAlternateFileName="555__C~1.PRO")) returned 0 [0204.904] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0204.904] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\555__connections_cellular_orange (niger)_i0$(__mvid)@wap.provxml")) returned 1 [0204.907] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\555__Connections_Cellular_Orange (Niger)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\555__connections_cellular_orange (niger)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0204.907] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml", cAlternateFileName="556__C~1.PRO")) returned 1 [0204.907] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\556__connections_cellular_cct (democratic republic of the congo)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0204.908] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU2X19D3256ZWN01W96c19DZW4sdW42cl9DQ1QgKERl3W9jcmF01WMgUmVwdWJs1WMg32YgdG2lIENv3mdvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu2x19d3256zwn01w96c19dzw4sdw42cl9dq1qgkerl3w9jcmf01wmgumvwdwjs1wmg32ygdg2lienv3mdvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0204.909] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0204.909] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0204.909] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0204.978] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0204.980] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0204.981] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.005] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.018] CloseHandle (hObject=0x1fc) returned 1 [0205.018] CloseHandle (hObject=0x204) returned 1 [0205.018] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\556__connections_cellular_cct (democratic republic of the congo)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU2X19D3256ZWN01W96c19DZW4sdW42cl9DQ1QgKERl3W9jcmF01WMgUmVwdWJs1WMg32YgdG2lIENv3mdvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu2x19d3256zwn01w96c19dzw4sdw42cl9dq1qgkerl3w9jcmf01wmgumvwdwjs1wmg32ygdg2lienv3mdvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0205.019] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU2X19D3256ZWN01W96c19DZW4sdW42cl9DQ1QgKERl3W9jcmF01WMgUmVwdWJs1WMg32YgdG2lIENv3mdvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu2x19d3256zwn01w96c19dzw4sdw42cl9dq1qgkerl3w9jcmf01wmgumvwdwjs1wmg32ygdg2lienv3mdvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0205.019] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml", cAlternateFileName="556__C~1.PRO")) returned 0x7d2c18 [0205.019] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml", cAlternateFileName="556__C~1.PRO")) returned 0 [0205.019] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0205.019] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\556__connections_cellular_cct (democratic republic of the congo)_i0$(__mvid)@wap.provxml")) returned 1 [0205.021] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\556__Connections_Cellular_CCT (Democratic Republic of the Congo)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\556__connections_cellular_cct (democratic republic of the congo)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0205.021] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="557__C~1.PRO")) returned 1 [0205.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\557__connections_cellular_orange (senegal)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.021] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNl3mVnYWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnl3mvnywwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.022] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35d [0205.022] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.022] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0205.105] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35d, lpOverlapped=0x0) returned 1 [0205.106] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0205.107] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.131] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.144] CloseHandle (hObject=0x204) returned 1 [0205.144] CloseHandle (hObject=0x1fc) returned 1 [0205.144] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\557__connections_cellular_orange (senegal)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNl3mVnYWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnl3mvnywwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0205.145] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU3X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNl3mVnYWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu3x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnl3mvnywwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0205.145] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="557__C~1.PRO")) returned 0x7d3018 [0205.145] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91403f0f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91403f0f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91403f0f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml", cAlternateFileName="557__C~1.PRO")) returned 0 [0205.145] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0205.145] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\557__connections_cellular_orange (senegal)_i0$(__mvid)@wap.provxml")) returned 1 [0205.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\557__Connections_Cellular_Orange (Senegal)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\557__connections_cellular_orange (senegal)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0205.146] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x0, cFileName="558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml", cAlternateFileName="558__C~1.PRO")) returned 1 [0205.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\558__connections_cellular_orange (senegal)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNl3mVnYWwpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnl3mvnywwpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.148] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x349 [0205.148] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.148] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0205.248] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x349, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x349, lpOverlapped=0x0) returned 1 [0205.250] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0205.250] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.274] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.285] CloseHandle (hObject=0x1fc) returned 1 [0205.286] CloseHandle (hObject=0x204) returned 1 [0205.286] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\558__connections_cellular_orange (senegal)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNl3mVnYWwpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnl3mvnywwpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0205.287] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNl3mVnYWwpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfnl3mvnywwpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0205.287] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml", cAlternateFileName="558__C~1.PRO")) returned 0x7d3018 [0205.287] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x349, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml", cAlternateFileName="558__C~1.PRO")) returned 0 [0205.287] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0205.287] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\558__connections_cellular_orange (senegal)_i1$(__mvid)@wap.provxml")) returned 1 [0205.288] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\558__Connections_Cellular_Orange (Senegal)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\558__connections_cellular_orange (senegal)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0205.288] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="559__C~1.PRO")) returned 1 [0205.291] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\559__connections_cellular_orange (tunisia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.291] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.292] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0205.292] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.292] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0205.491] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0205.496] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0205.497] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.520] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.533] CloseHandle (hObject=0x204) returned 1 [0205.533] CloseHandle (hObject=0x1fc) returned 1 [0205.533] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\559__connections_cellular_orange (tunisia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0205.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTU5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntu5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0205.535] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="559__C~1.PRO")) returned 0x7d2998 [0205.535] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="559__C~1.PRO")) returned 0 [0205.535] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0205.535] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\559__connections_cellular_orange (tunisia)_i0$(__mvid)@wap.provxml")) returned 1 [0205.536] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\559__Connections_Cellular_Orange (Tunisia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\559__connections_cellular_orange (tunisia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0205.536] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="55__CO~1.PRO")) returned 1 [0205.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\55__connections_cellular_oi (brazil)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09pIC2CcmF61WwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntvfx0nv3m5ly3rp325zx0nl3g413gfyx09pic2ccmf61wwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.537] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0205.537] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.537] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0205.609] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0205.641] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0205.642] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.664] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.676] CloseHandle (hObject=0x1fc) returned 1 [0205.676] CloseHandle (hObject=0x204) returned 1 [0205.676] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\55__connections_cellular_oi (brazil)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09pIC2CcmF61WwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntvfx0nv3m5ly3rp325zx0nl3g413gfyx09pic2ccmf61wwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0205.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09pIC2CcmF61WwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntvfx0nv3m5ly3rp325zx0nl3g413gfyx09pic2ccmf61wwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0205.677] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="55__CO~1.PRO")) returned 0x7d2cd8 [0205.677] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="55__CO~1.PRO")) returned 0 [0205.677] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0205.677] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\55__connections_cellular_oi (brazil)_i0$(__mvid)@wap.provxml")) returned 1 [0205.678] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\55__Connections_Cellular_Oi (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\55__connections_cellular_oi (brazil)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0205.678] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="560__C~1.PRO")) returned 1 [0205.679] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\560__connections_cellular_orange (tunisia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.679] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntywx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.679] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0205.679] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.680] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0205.783] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0205.784] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0205.785] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.808] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.819] CloseHandle (hObject=0x204) returned 1 [0205.819] CloseHandle (hObject=0x1fc) returned 1 [0205.820] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\560__connections_cellular_orange (tunisia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntywx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0205.821] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntywx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0205.821] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="560__C~1.PRO")) returned 0x7d2c18 [0205.821] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="560__C~1.PRO")) returned 0 [0205.821] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0205.821] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\560__connections_cellular_orange (tunisia)_i1$(__mvid)@wap.provxml")) returned 1 [0205.822] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\560__Connections_Cellular_Orange (Tunisia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\560__connections_cellular_orange (tunisia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0205.822] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="561__C~1.PRO")) returned 1 [0205.822] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\561__connections_cellular_orange (tunisia)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.822] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.823] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0205.823] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.823] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0205.894] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0205.895] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0205.896] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0205.919] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0205.930] CloseHandle (hObject=0x1fc) returned 1 [0205.930] CloseHandle (hObject=0x204) returned 1 [0205.930] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\561__connections_cellular_orange (tunisia)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0205.931] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0205.931] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="561__C~1.PRO")) returned 0x7d2ad8 [0205.931] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9142a17a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="561__C~1.PRO")) returned 0 [0205.931] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0205.931] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\561__connections_cellular_orange (tunisia)_i2$(__mvid)@wap.provxml")) returned 1 [0205.932] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\561__Connections_Cellular_Orange (Tunisia)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\561__connections_cellular_orange (tunisia)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0205.932] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="562__C~1.PRO")) returned 1 [0205.933] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\562__connections_cellular_orange (tunisia)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0205.933] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntyyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0205.933] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0205.934] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0205.934] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.003] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0206.005] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0206.006] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.031] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.042] CloseHandle (hObject=0x204) returned 1 [0206.042] CloseHandle (hObject=0x1fc) returned 1 [0206.042] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\562__connections_cellular_orange (tunisia)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntyyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0206.043] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntyyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0206.043] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="562__C~1.PRO")) returned 0x7d29d8 [0206.043] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9142a17a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9142a17a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="562__C~1.PRO")) returned 0 [0206.043] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0206.043] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\562__connections_cellular_orange (tunisia)_i3$(__mvid)@wap.provxml")) returned 1 [0206.045] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\562__Connections_Cellular_Orange (Tunisia)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\562__connections_cellular_orange (tunisia)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0206.045] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="563__C~1.PRO")) returned 1 [0206.045] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\563__connections_cellular_orange (tunisia)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.046] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntyzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.047] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0206.047] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.047] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.143] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0206.146] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0206.147] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.172] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.183] CloseHandle (hObject=0x1fc) returned 1 [0206.184] CloseHandle (hObject=0x204) returned 1 [0206.184] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\563__connections_cellular_orange (tunisia)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntyzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0206.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTYzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntyzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0206.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="563__C~1.PRO")) returned 0x7d3018 [0206.185] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="563__C~1.PRO")) returned 0 [0206.185] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0206.185] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\563__connections_cellular_orange (tunisia)_i4$(__mvid)@wap.provxml")) returned 1 [0206.187] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\563__Connections_Cellular_Orange (Tunisia)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\563__connections_cellular_orange (tunisia)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0206.187] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="564__C~1.PRO")) returned 1 [0206.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\564__connections_cellular_orange (tunisia)_i5$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.188] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.188] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0206.188] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.189] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.254] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0206.256] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0206.257] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.281] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.291] CloseHandle (hObject=0x204) returned 1 [0206.292] CloseHandle (hObject=0x1fc) returned 1 [0206.292] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\564__connections_cellular_orange (tunisia)_i5$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0206.293] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFR13mlz1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfr13mlz1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0206.293] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="564__C~1.PRO")) returned 0x7d2c18 [0206.293] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="564__C~1.PRO")) returned 0 [0206.293] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0206.293] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\564__connections_cellular_orange (tunisia)_i5$(__mvid)@wap.provxml")) returned 1 [0206.294] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\564__Connections_Cellular_Orange (Tunisia)_i5$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\564__connections_cellular_orange (tunisia)_i5$(__mvid)@wap.provxml")) returned 0xffffffff [0206.294] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml", cAlternateFileName="565__C~1.PRO")) returned 1 [0206.294] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\565__connections_cellular_orange (uganda)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.295] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFVnYW55YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfvnyw55yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.295] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0206.295] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.296] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.398] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0206.399] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0206.400] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.432] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.443] CloseHandle (hObject=0x1fc) returned 1 [0206.443] CloseHandle (hObject=0x204) returned 1 [0206.443] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\565__connections_cellular_orange (uganda)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFVnYW55YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfvnyw55yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0206.444] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFVnYW55YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfvnyw55yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0206.444] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml", cAlternateFileName="565__C~1.PRO")) returned 0x7d3018 [0206.445] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml", cAlternateFileName="565__C~1.PRO")) returned 0 [0206.445] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0206.445] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\565__connections_cellular_orange (uganda)_i0$(__mvid)@wap.provxml")) returned 1 [0206.446] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\565__Connections_Cellular_Orange (Uganda)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\565__connections_cellular_orange (uganda)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0206.446] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="566__C~1.PRO")) returned 1 [0206.446] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\566__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.446] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY2X19D3256ZWN01W96c19DZW4sdW42cl9DdWJpYyBUZW4lY29tIC2M1WVj1HRl3nN0ZWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty2x19d3256zwn01w96c19dzw4sdw42cl9ddwjpyybuzw4ly29tic2m1wvj1hrl3nn0zwl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.447] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35a [0206.447] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.448] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.512] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x35a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x35a, lpOverlapped=0x0) returned 1 [0206.514] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0206.515] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.538] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.549] CloseHandle (hObject=0x204) returned 1 [0206.550] CloseHandle (hObject=0x1fc) returned 1 [0206.550] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\566__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY2X19D3256ZWN01W96c19DZW4sdW42cl9DdWJpYyBUZW4lY29tIC2M1WVj1HRl3nN0ZWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty2x19d3256zwn01w96c19dzw4sdw42cl9ddwjpyybuzw4ly29tic2m1wvj1hrl3nn0zwl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0206.551] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY2X19D3256ZWN01W96c19DZW4sdW42cl9DdWJpYyBUZW4lY29tIC2M1WVj1HRl3nN0ZWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty2x19d3256zwn01w96c19dzw4sdw42cl9ddwjpyybuzw4ly29tic2m1wvj1hrl3nn0zwl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0206.551] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="566__C~1.PRO")) returned 0x7d2b18 [0206.551] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914503e2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914503e2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914503e2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="566__C~1.PRO")) returned 0 [0206.551] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0206.551] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\566__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml")) returned 1 [0206.552] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\566__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\566__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0206.552] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="567__C~1.PRO")) returned 1 [0206.552] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\567__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY3X19D3256ZWN01W96c19DZW4sdW42cl9DdWJpYyBUZW4lY29tIC2M1WVj1HRl3nN0ZWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty3x19d3256zwn01w96c19dzw4sdw42cl9ddwjpyybuzw4ly29tic2m1wvj1hrl3nn0zwl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.555] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34e [0206.555] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.555] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.631] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34e, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34e, lpOverlapped=0x0) returned 1 [0206.633] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0206.634] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.658] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.669] CloseHandle (hObject=0x1fc) returned 1 [0206.669] CloseHandle (hObject=0x204) returned 1 [0206.669] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\567__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY3X19D3256ZWN01W96c19DZW4sdW42cl9DdWJpYyBUZW4lY29tIC2M1WVj1HRl3nN0ZWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty3x19d3256zwn01w96c19dzw4sdw42cl9ddwjpyybuzw4ly29tic2m1wvj1hrl3nn0zwl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0206.670] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY3X19D3256ZWN01W96c19DZW4sdW42cl9DdWJpYyBUZW4lY29tIC2M1WVj1HRl3nN0ZWl6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty3x19d3256zwn01w96c19dzw4sdw42cl9ddwjpyybuzw4ly29tic2m1wvj1hrl3nn0zwl6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0206.670] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="567__C~1.PRO")) returned 0x7d3018 [0206.670] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="567__C~1.PRO")) returned 0 [0206.671] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0206.671] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\567__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml")) returned 1 [0206.672] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\567__Connections_Cellular_Cubic Telecom (Liechtenstein)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\567__connections_cellular_cubic telecom (liechtenstein)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0206.672] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x0, cFileName="568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="568__C~1.PRO")) returned 1 [0206.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\568__connections_cellular_digi.mobil (romania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpL51vYmlsIC2S32123ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpl51vymlsic2s32123ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.673] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x30f [0206.673] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.673] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.798] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x30f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x30f, lpOverlapped=0x0) returned 1 [0206.799] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0206.800] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.823] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.834] CloseHandle (hObject=0x204) returned 1 [0206.834] CloseHandle (hObject=0x1fc) returned 1 [0206.835] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\568__connections_cellular_digi.mobil (romania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpL51vYmlsIC2S32123ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpl51vymlsic2s32123ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0206.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpL51vYmlsIC2S32123ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpl51vymlsic2s32123ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0206.836] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="568__C~1.PRO")) returned 0x7d2c18 [0206.836] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="568__C~1.PRO")) returned 0 [0206.836] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0206.836] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\568__connections_cellular_digi.mobil (romania)_i0$(__mvid)@wap.provxml")) returned 1 [0206.837] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\568__Connections_Cellular_Digi.Mobil (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\568__connections_cellular_digi.mobil (romania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0206.837] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="569__C~1.PRO")) returned 1 [0206.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\569__connections_cellular_telekom.ro (romania)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY5X19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty5x19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.838] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x30b [0206.838] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.838] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0206.905] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x30b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x30b, lpOverlapped=0x0) returned 1 [0206.906] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0206.908] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0206.930] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0206.941] CloseHandle (hObject=0x1fc) returned 1 [0206.941] CloseHandle (hObject=0x204) returned 1 [0206.941] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\569__connections_cellular_telekom.ro (romania)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY5X19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty5x19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0206.942] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTY5X19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nty5x19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0206.942] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="569__C~1.PRO")) returned 0x7d29d8 [0206.942] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9147664e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9147664e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9147664e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="569__C~1.PRO")) returned 0 [0206.942] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0206.943] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\569__connections_cellular_telekom.ro (romania)_i0$(__mvid)@wap.provxml")) returned 1 [0206.943] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\569__Connections_Cellular_TELEKOM.RO (Romania)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\569__connections_cellular_telekom.ro (romania)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0206.944] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="56__CO~1.PRO")) returned 1 [0206.944] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\56__connections_cellular_sercomtel (brazil)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0206.944] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1NlcmNv3XRl3CAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntzfx0nv3m5ly3rp325zx0nl3g413gfyx1nlcmnv3xrl3caoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0206.945] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0206.945] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0206.945] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.012] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0207.014] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0207.015] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.038] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.049] CloseHandle (hObject=0x204) returned 1 [0207.049] CloseHandle (hObject=0x1fc) returned 1 [0207.049] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\56__connections_cellular_sercomtel (brazil)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1NlcmNv3XRl3CAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntzfx0nv3m5ly3rp325zx0nl3g413gfyx1nlcmnv3xrl3caoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0207.050] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1NlcmNv3XRl3CAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntzfx0nv3m5ly3rp325zx0nl3g413gfyx1nlcmnv3xrl3caoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0207.050] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="56__CO~1.PRO")) returned 0x7d2998 [0207.051] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="56__CO~1.PRO")) returned 0 [0207.051] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0207.051] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\56__connections_cellular_sercomtel (brazil)_i0$(__mvid)@wap.provxml")) returned 1 [0207.052] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\56__Connections_Cellular_Sercomtel (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\56__connections_cellular_sercomtel (brazil)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0207.052] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="570__C~1.PRO")) returned 1 [0207.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\570__connections_cellular_telekom.ro (romania)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTcwX19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntcwx19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.053] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x37c [0207.053] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.053] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.144] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x37c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x37c, lpOverlapped=0x0) returned 1 [0207.146] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0207.147] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.170] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.181] CloseHandle (hObject=0x1fc) returned 1 [0207.181] CloseHandle (hObject=0x204) returned 1 [0207.184] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\570__connections_cellular_telekom.ro (romania)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTcwX19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntcwx19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0207.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTcwX19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntcwx19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0207.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="570__C~1.PRO")) returned 0x7d2ad8 [0207.185] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="570__C~1.PRO")) returned 0 [0207.185] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0207.185] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\570__connections_cellular_telekom.ro (romania)_i1$(__mvid)@wap.provxml")) returned 1 [0207.186] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\570__Connections_Cellular_TELEKOM.RO (Romania)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\570__connections_cellular_telekom.ro (romania)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0207.186] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml", cAlternateFileName="571__C~1.PRO")) returned 1 [0207.186] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\571__connections_cellular_telekom.ro (romania)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc4X19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc4x19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.187] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x37d [0207.187] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.188] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.253] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x37d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x37d, lpOverlapped=0x0) returned 1 [0207.254] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0207.255] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.280] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.291] CloseHandle (hObject=0x204) returned 1 [0207.291] CloseHandle (hObject=0x1fc) returned 1 [0207.291] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\571__connections_cellular_telekom.ro (romania)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc4X19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc4x19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0207.292] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc4X19D3256ZWN01W96c19DZW4sdW42cl9URU4FS09NLlJPIC2S32123ml2KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc4x19d3256zwn01w96c19dzw4sdw42cl9uru4fs09nlljpic2s32123ml2kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0207.292] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml", cAlternateFileName="571__C~1.PRO")) returned 0x7d2ad8 [0207.292] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml", cAlternateFileName="571__C~1.PRO")) returned 0 [0207.292] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0207.293] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\571__connections_cellular_telekom.ro (romania)_i2$(__mvid)@wap.provxml")) returned 1 [0207.294] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\571__Connections_Cellular_TELEKOM.RO (Romania)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\571__connections_cellular_telekom.ro (romania)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0207.294] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="572__C~1.PRO")) returned 1 [0207.294] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\572__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.294] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTcyX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntcyx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.295] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0207.295] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.295] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.391] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0207.392] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0207.393] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.417] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.429] CloseHandle (hObject=0x1fc) returned 1 [0207.429] CloseHandle (hObject=0x204) returned 1 [0207.429] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\572__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTcyX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntcyx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0207.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTcyX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntcyx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0207.430] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="572__C~1.PRO")) returned 0x7d2a58 [0207.430] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="572__C~1.PRO")) returned 0 [0207.430] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0207.430] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\572__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0207.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\572__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\572__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0207.431] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="573__C~1.PRO")) returned 1 [0207.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\573__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTczX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntczx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.433] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d3 [0207.433] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.433] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.500] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d3, lpOverlapped=0x0) returned 1 [0207.501] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0207.502] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.525] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.536] CloseHandle (hObject=0x204) returned 1 [0207.536] CloseHandle (hObject=0x1fc) returned 1 [0207.536] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\573__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTczX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntczx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0207.537] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTczX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntczx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0207.537] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="573__C~1.PRO")) returned 0x7d3018 [0207.537] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9149c8b9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9149c8b9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9149c8b9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="573__C~1.PRO")) returned 0 [0207.537] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0207.537] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\573__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0207.538] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\573__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\573__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0207.538] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="574__C~1.PRO")) returned 1 [0207.544] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\574__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.544] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc0X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc0x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.550] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0207.550] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.550] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.617] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0207.618] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0207.619] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.642] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.653] CloseHandle (hObject=0x1fc) returned 1 [0207.653] CloseHandle (hObject=0x204) returned 1 [0207.654] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\574__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc0X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc0x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0207.654] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc0X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc0x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0207.655] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="574__C~1.PRO")) returned 0x7d2998 [0207.655] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="574__C~1.PRO")) returned 0 [0207.655] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0207.655] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\574__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0207.656] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\574__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\574__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0207.656] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="575__C~1.PRO")) returned 1 [0207.656] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\575__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.656] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.657] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d3 [0207.657] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.657] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.822] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d3, lpOverlapped=0x0) returned 1 [0207.823] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0207.824] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.848] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.859] CloseHandle (hObject=0x204) returned 1 [0207.859] CloseHandle (hObject=0x1fc) returned 1 [0207.859] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\575__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0207.860] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0207.860] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="575__C~1.PRO")) returned 0x7d2a18 [0207.861] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="575__C~1.PRO")) returned 0 [0207.861] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0207.861] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\575__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0207.862] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\575__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\575__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0207.862] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="576__C~1.PRO")) returned 1 [0207.862] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\576__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.862] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc2X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc2x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.863] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0207.863] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.863] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0207.933] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0207.936] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0207.937] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0207.963] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0207.977] CloseHandle (hObject=0x1fc) returned 1 [0207.977] CloseHandle (hObject=0x204) returned 1 [0207.977] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\576__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc2X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc2x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0207.979] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc2X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc2x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0207.979] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="576__C~1.PRO")) returned 0x7d2918 [0207.980] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="576__C~1.PRO")) returned 0 [0207.980] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0207.980] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\576__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0207.982] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\576__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\576__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0207.982] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="577__C~1.PRO")) returned 1 [0207.982] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\577__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0207.983] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc3X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc3x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0207.984] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0207.984] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0207.984] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.052] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0208.054] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.055] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.083] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.097] CloseHandle (hObject=0x204) returned 1 [0208.097] CloseHandle (hObject=0x1fc) returned 1 [0208.098] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\577__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc3X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc3x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.099] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc3X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc3x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.099] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="577__C~1.PRO")) returned 0x7d2b18 [0208.099] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="577__C~1.PRO")) returned 0 [0208.099] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0208.099] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\577__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0208.101] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\577__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\577__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.101] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="578__C~1.PRO")) returned 1 [0208.101] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\578__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.102] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.102] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0208.103] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.103] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.196] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0208.198] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.199] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.222] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.233] CloseHandle (hObject=0x1fc) returned 1 [0208.233] CloseHandle (hObject=0x204) returned 1 [0208.233] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\578__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.234] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.234] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="578__C~1.PRO")) returned 0x7d2c18 [0208.234] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914c2b28, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914c2b28, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914c2b28, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="578__C~1.PRO")) returned 0 [0208.235] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0208.235] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\578__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0208.236] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\578__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\578__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.236] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="579__C~1.PRO")) returned 1 [0208.237] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\579__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.237] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc5X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc5x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.238] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0208.238] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.238] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.340] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0208.341] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.342] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.365] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.378] CloseHandle (hObject=0x204) returned 1 [0208.378] CloseHandle (hObject=0x1fc) returned 1 [0208.378] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\579__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc5X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc5x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.379] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTc5X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntc5x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.379] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="579__C~1.PRO")) returned 0x7d3018 [0208.379] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="579__C~1.PRO")) returned 0 [0208.379] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0208.379] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\579__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0208.380] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\579__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\579__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.380] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="57__CO~1.PRO")) returned 1 [0208.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\57__connections_cellular_tim (brazil)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.381] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1RJTSAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntdfx0nv3m5ly3rp325zx0nl3g413gfyx1rjtsaoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.382] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x340 [0208.382] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.382] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.448] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x340, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x340, lpOverlapped=0x0) returned 1 [0208.450] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0208.451] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.474] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.485] CloseHandle (hObject=0x1fc) returned 1 [0208.485] CloseHandle (hObject=0x204) returned 1 [0208.485] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\57__connections_cellular_tim (brazil)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1RJTSAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntdfx0nv3m5ly3rp325zx0nl3g413gfyx1rjtsaoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0208.486] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1RJTSAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntdfx0nv3m5ly3rp325zx0nl3g413gfyx1rjtsaoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0208.486] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="57__CO~1.PRO")) returned 0x7d2b58 [0208.486] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902ba650, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902ba650, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902ba650, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="57__CO~1.PRO")) returned 0 [0208.486] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0208.486] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\57__connections_cellular_tim (brazil)_i0$(__mvid)@wap.provxml")) returned 1 [0208.487] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\57__Connections_Cellular_TIM (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\57__connections_cellular_tim (brazil)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.487] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="580__C~1.PRO")) returned 1 [0208.488] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\580__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.488] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgwX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgwx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.488] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0208.489] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.489] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.556] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0208.558] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.559] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.584] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.595] CloseHandle (hObject=0x204) returned 1 [0208.595] CloseHandle (hObject=0x1fc) returned 1 [0208.595] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\580__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgwX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgwx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.596] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgwX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgwx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.596] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="580__C~1.PRO")) returned 0x7d2a98 [0208.597] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="580__C~1.PRO")) returned 0 [0208.597] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0208.597] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\580__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0208.598] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\580__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\580__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.598] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="581__C~1.PRO")) returned 1 [0208.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\581__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.599] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0208.599] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.599] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.699] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0208.712] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.713] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.736] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.773] CloseHandle (hObject=0x1fc) returned 1 [0208.773] CloseHandle (hObject=0x204) returned 1 [0208.773] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\581__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.774] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.774] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="581__C~1.PRO")) returned 0x7d2c18 [0208.774] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="581__C~1.PRO")) returned 0 [0208.774] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0208.774] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\581__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0208.775] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\581__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\581__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.775] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="582__C~1.PRO")) returned 1 [0208.776] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\582__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.776] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgyX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgyx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.777] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0208.777] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.777] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.843] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0208.844] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.845] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.870] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.881] CloseHandle (hObject=0x204) returned 1 [0208.881] CloseHandle (hObject=0x1fc) returned 1 [0208.881] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\582__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgyX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgyx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.882] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgyX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgyx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.883] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="582__C~1.PRO")) returned 0x7d2c18 [0208.883] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x914e8d94, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x914e8d94, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x914e8d94, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="582__C~1.PRO")) returned 0 [0208.883] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0208.883] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\582__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0208.884] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\582__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\582__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0208.884] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="583__C~1.PRO")) returned 1 [0208.884] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\583__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0208.884] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgzX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgzx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0208.885] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0208.885] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0208.885] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0208.956] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0208.959] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0208.961] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0208.983] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0208.997] CloseHandle (hObject=0x1fc) returned 1 [0208.997] CloseHandle (hObject=0x204) returned 1 [0208.997] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\583__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgzX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgzx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0208.998] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTgzX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntgzx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0208.999] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="583__C~1.PRO")) returned 0x7d3018 [0208.999] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="583__C~1.PRO")) returned 0 [0208.999] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0208.999] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\583__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.000] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\583__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\583__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.000] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="584__C~1.PRO")) returned 1 [0209.000] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\584__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.001] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg0X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg0x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.001] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0209.001] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.002] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.092] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0209.093] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0209.094] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.120] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.132] CloseHandle (hObject=0x204) returned 1 [0209.132] CloseHandle (hObject=0x1fc) returned 1 [0209.132] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\584__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg0X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg0x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.133] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg0X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg0x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.133] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="584__C~1.PRO")) returned 0x7d3018 [0209.133] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="584__C~1.PRO")) returned 0 [0209.133] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0209.133] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\584__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.134] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\584__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\584__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.134] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="585__C~1.PRO")) returned 1 [0209.135] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\585__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.135] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg1X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg1x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.136] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0209.136] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.136] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.202] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0209.205] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0209.206] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.228] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.239] CloseHandle (hObject=0x1fc) returned 1 [0209.239] CloseHandle (hObject=0x204) returned 1 [0209.239] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\585__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg1X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg1x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.240] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg1X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg1x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.240] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="585__C~1.PRO")) returned 0x7d2c98 [0209.241] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="585__C~1.PRO")) returned 0 [0209.241] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0209.241] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\585__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.242] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\585__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\585__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.242] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="586__C~1.PRO")) returned 1 [0209.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\586__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.243] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg2X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg2x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.244] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0209.244] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.244] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.345] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0209.346] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0209.347] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.372] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.383] CloseHandle (hObject=0x204) returned 1 [0209.383] CloseHandle (hObject=0x1fc) returned 1 [0209.383] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\586__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg2X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg2x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.384] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg2X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg2x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.384] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="586__C~1.PRO")) returned 0x7d2a18 [0209.384] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9150effc, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9150effc, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9150effc, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="586__C~1.PRO")) returned 0 [0209.384] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0209.384] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\586__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\586__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\586__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.385] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="587__C~1.PRO")) returned 1 [0209.386] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\587__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.386] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg3X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg3x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.387] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0209.387] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.387] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.459] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0209.463] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0209.464] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.488] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.498] CloseHandle (hObject=0x1fc) returned 1 [0209.498] CloseHandle (hObject=0x204) returned 1 [0209.499] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\587__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg3X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg3x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.500] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg3X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg3x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.500] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="587__C~1.PRO")) returned 0x7d3018 [0209.500] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="587__C~1.PRO")) returned 0 [0209.500] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0209.500] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\587__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.501] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\587__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\587__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.501] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="588__C~1.PRO")) returned 1 [0209.501] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\588__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.502] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.502] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0209.502] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.503] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.603] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0209.604] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0209.605] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.628] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.642] CloseHandle (hObject=0x204) returned 1 [0209.642] CloseHandle (hObject=0x1fc) returned 1 [0209.642] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\588__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.643] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg4X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg4x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.643] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="588__C~1.PRO")) returned 0x7d2b98 [0209.643] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="588__C~1.PRO")) returned 0 [0209.643] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0209.643] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\588__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.644] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\588__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\588__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.644] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="589__C~1.PRO")) returned 1 [0209.645] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\589__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.645] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg5X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg5x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.645] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0209.645] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.646] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.720] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0209.723] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0209.724] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.780] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.791] CloseHandle (hObject=0x1fc) returned 1 [0209.792] CloseHandle (hObject=0x204) returned 1 [0209.792] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\589__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg5X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg5x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.793] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTg5X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntg5x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.793] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="589__C~1.PRO")) returned 0x7d3018 [0209.793] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="589__C~1.PRO")) returned 0 [0209.793] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0209.793] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\589__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0209.794] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\589__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\589__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.794] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="58__CO~1.PRO")) returned 1 [0209.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\58__connections_cellular_vivo (brazil)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.795] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Zpdm8gKEJyYXpp3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt2fx0nv3m5ly3rp325zx0nl3g413gfyx1zpdm8gkejyyxpp3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.795] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x33f [0209.796] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.796] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.861] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x33f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x33f, lpOverlapped=0x0) returned 1 [0209.862] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0209.863] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0209.887] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0209.898] CloseHandle (hObject=0x204) returned 1 [0209.898] CloseHandle (hObject=0x1fc) returned 1 [0209.898] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\58__connections_cellular_vivo (brazil)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Zpdm8gKEJyYXpp3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt2fx0nv3m5ly3rp325zx0nl3g413gfyx1zpdm8gkejyyxpp3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0209.899] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Zpdm8gKEJyYXpp3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt2fx0nv3m5ly3rp325zx0nl3g413gfyx1zpdm8gkejyyxpp3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0209.899] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="58__CO~1.PRO")) returned 0x7d2c98 [0209.899] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="58__CO~1.PRO")) returned 0 [0209.899] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0209.899] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\58__connections_cellular_vivo (brazil)_i0$(__mvid)@wap.provxml")) returned 1 [0209.900] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\58__Connections_Cellular_Vivo (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\58__connections_cellular_vivo (brazil)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0209.900] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="590__C~1.PRO")) returned 1 [0209.902] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\590__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0209.903] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5wX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5wx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0209.903] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc [0209.903] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0209.904] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0209.982] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bc, lpOverlapped=0x0) returned 1 [0209.986] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0209.987] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.010] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.021] CloseHandle (hObject=0x1fc) returned 1 [0210.021] CloseHandle (hObject=0x204) returned 1 [0210.021] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\590__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5wX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5wx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.025] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5wX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5wx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.025] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="590__C~1.PRO")) returned 0x7d2a18 [0210.026] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91535267, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91535267, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91535267, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="590__C~1.PRO")) returned 0 [0210.026] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0210.026] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\590__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\590__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\590__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.027] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="591__C~1.PRO")) returned 1 [0210.030] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\591__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.030] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT54X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt54x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.031] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0210.031] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.031] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0210.090] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0210.092] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0210.093] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.115] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.129] CloseHandle (hObject=0x204) returned 1 [0210.129] CloseHandle (hObject=0x1fc) returned 1 [0210.129] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\591__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT54X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt54x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.130] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT54X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt54x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.130] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="591__C~1.PRO")) returned 0x7d2d58 [0210.130] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="591__C~1.PRO")) returned 0 [0210.130] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0210.131] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\591__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.132] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\591__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\591__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.132] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="592__C~1.PRO")) returned 1 [0210.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\592__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.132] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5yX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5yx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.133] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0210.133] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.133] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0210.364] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0210.383] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0210.384] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.407] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.418] CloseHandle (hObject=0x1fc) returned 1 [0210.418] CloseHandle (hObject=0x204) returned 1 [0210.418] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\592__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5yX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5yx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.419] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5yX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5yx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.419] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="592__C~1.PRO")) returned 0x7d3098 [0210.419] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="592__C~1.PRO")) returned 0 [0210.419] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0210.419] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\592__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\592__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\592__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.420] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="593__C~1.PRO")) returned 1 [0210.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\593__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5zX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5zx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.422] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0210.422] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.422] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0210.489] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0210.491] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0210.492] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.515] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.526] CloseHandle (hObject=0x204) returned 1 [0210.526] CloseHandle (hObject=0x1fc) returned 1 [0210.526] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\593__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5zX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5zx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.527] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT5zX19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt5zx19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="593__C~1.PRO")) returned 0x7d3098 [0210.527] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9155b4d3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9155b4d3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9155b4d3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="593__C~1.PRO")) returned 0 [0210.527] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0210.528] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\593__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.528] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\593__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\593__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.529] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="594__C~1.PRO")) returned 1 [0210.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\594__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT50X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt50x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.530] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0210.530] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.530] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0210.633] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0210.637] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0210.638] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.661] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.672] CloseHandle (hObject=0x1fc) returned 1 [0210.672] CloseHandle (hObject=0x204) returned 1 [0210.672] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\594__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT50X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt50x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.673] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT50X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt50x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.673] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="594__C~1.PRO")) returned 0x7d3018 [0210.674] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="594__C~1.PRO")) returned 0 [0210.674] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0210.674] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\594__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.675] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\594__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\594__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.675] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="595__C~1.PRO")) returned 1 [0210.675] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\595__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.675] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT51X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt51x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.676] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0210.676] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.676] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0210.751] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0210.753] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0210.754] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.817] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.828] CloseHandle (hObject=0x204) returned 1 [0210.828] CloseHandle (hObject=0x1fc) returned 1 [0210.829] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\595__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT51X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt51x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.829] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT51X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt51x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.830] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="595__C~1.PRO")) returned 0x7d3018 [0210.830] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="595__C~1.PRO")) returned 0 [0210.830] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0210.830] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\595__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.831] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\595__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\595__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.831] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="596__C~1.PRO")) returned 1 [0210.831] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\596__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.832] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT52X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt52x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.833] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0210.833] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.833] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0210.898] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0210.899] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0210.900] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0210.923] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0210.936] CloseHandle (hObject=0x1fc) returned 1 [0210.936] CloseHandle (hObject=0x204) returned 1 [0210.936] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\596__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT52X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt52x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0210.937] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT52X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt52x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0210.937] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="596__C~1.PRO")) returned 0x7d3018 [0210.938] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="596__C~1.PRO")) returned 0 [0210.938] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0210.938] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\596__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0210.939] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\596__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\596__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0210.939] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="597__C~1.PRO")) returned 1 [0210.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\597__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0210.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT53X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt53x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0210.940] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0210.940] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0210.940] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.005] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0211.007] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0211.008] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.033] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.044] CloseHandle (hObject=0x204) returned 1 [0211.044] CloseHandle (hObject=0x1fc) returned 1 [0211.044] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\597__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT53X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt53x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0211.045] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT53X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt53x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0211.045] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="597__C~1.PRO")) returned 0x7d2998 [0211.045] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91581742, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91581742, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91581742, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="597__C~1.PRO")) returned 0 [0211.046] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0211.046] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\597__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0211.047] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\597__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\597__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0211.047] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="598__C~1.PRO")) returned 1 [0211.047] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\598__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0211.047] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT54X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt54x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0211.048] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0211.048] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0211.048] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.136] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0211.138] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0211.139] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.164] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.175] CloseHandle (hObject=0x1fc) returned 1 [0211.175] CloseHandle (hObject=0x204) returned 1 [0211.175] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\598__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT54X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt54x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0211.176] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT54X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt54x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0211.176] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="598__C~1.PRO")) returned 0x7d3018 [0211.177] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="598__C~1.PRO")) returned 0 [0211.177] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0211.177] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\598__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0211.178] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\598__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\598__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0211.178] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="599__C~1.PRO")) returned 1 [0211.179] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\599__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0211.179] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT55X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt55x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0211.180] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0211.180] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0211.180] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.248] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0211.250] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0211.251] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.274] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.285] CloseHandle (hObject=0x204) returned 1 [0211.285] CloseHandle (hObject=0x1fc) returned 1 [0211.285] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\599__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT55X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt55x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0211.286] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NT55X19D3256ZWN01W96c19DZW4sdW42cl9vMiAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nt55x19d3256zwn01w96c19dzw4sdw42cl9vmiaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0211.287] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="599__C~1.PRO")) returned 0x7d2d58 [0211.287] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="599__C~1.PRO")) returned 0 [0211.287] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0211.287] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\599__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0211.290] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\599__Connections_Cellular_o2 (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\599__connections_cellular_o2 (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0211.290] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="59__CO~1.PRO")) returned 1 [0211.291] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\59__connections_cellular_cosmo bulgaria mobile ead (bulgaria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0211.291] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0Nvc21vIEJ13Gd2cml2IE1vYmlsZSBFQUQgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntlfx0nv3m5ly3rp325zx0nl3g413gfyx0nvc21viej13gd2cml2ie1vymlszsbfquqgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0211.295] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0211.295] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0211.295] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.383] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0211.385] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0211.386] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.408] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.452] CloseHandle (hObject=0x1fc) returned 1 [0211.452] CloseHandle (hObject=0x204) returned 1 [0211.453] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\59__connections_cellular_cosmo bulgaria mobile ead (bulgaria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0Nvc21vIEJ13Gd2cml2IE1vYmlsZSBFQUQgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntlfx0nv3m5ly3rp325zx0nl3g413gfyx0nvc21viej13gd2cml2ie1vymlszsbfquqgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0211.454] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NTlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0Nvc21vIEJ13Gd2cml2IE1vYmlsZSBFQUQgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ntlfx0nv3m5ly3rp325zx0nl3g413gfyx0nvc21viej13gd2cml2ie1vymlszsbfquqgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0211.454] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="59__CO~1.PRO")) returned 0x7d2c18 [0211.454] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="59__CO~1.PRO")) returned 0 [0211.454] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0211.454] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\59__connections_cellular_cosmo bulgaria mobile ead (bulgaria)_i0$(__mvid)@wap.provxml")) returned 1 [0211.455] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\59__Connections_Cellular_Cosmo Bulgaria Mobile EAD (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\59__connections_cellular_cosmo bulgaria mobile ead (bulgaria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0211.455] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="5__CON~1.PRO")) returned 1 [0211.455] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\5__connections_cellular_telecom personal sa (argentina)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0211.456] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVGVsZWNv3SBQZXJz32523CBTQSAoQXJnZW501W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nv9fq2963mvjdglv3nnfq2vs3hvsyxjfvgvszwnv3sbqzxjz32523cbtqsaoqxjnzw501w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0211.456] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d9 [0211.456] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0211.457] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.524] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d9, lpOverlapped=0x0) returned 1 [0211.526] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0211.527] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.551] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.562] CloseHandle (hObject=0x204) returned 1 [0211.562] CloseHandle (hObject=0x1fc) returned 1 [0211.562] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\5__connections_cellular_telecom personal sa (argentina)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVGVsZWNv3SBQZXJz32523CBTQSAoQXJnZW501W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nv9fq2963mvjdglv3nnfq2vs3hvsyxjfvgvszwnv3sbqzxjz32523cbtqsaoqxjnzw501w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0211.563] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVGVsZWNv3SBQZXJz32523CBTQSAoQXJnZW501W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nv9fq2963mvjdglv3nnfq2vs3hvsyxjfvgvszwnv3sbqzxjz32523cbtqsaoqxjnzw501w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0211.563] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="5__CON~1.PRO")) returned 0x7d2a58 [0211.563] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="5__CON~1.PRO")) returned 0 [0211.563] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0211.563] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\5__connections_cellular_telecom personal sa (argentina)_i0$(__mvid)@wap.provxml")) returned 1 [0211.564] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\5__Connections_Cellular_Telecom Personal SA (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\5__connections_cellular_telecom personal sa (argentina)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0211.564] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="600__C~1.PRO")) returned 1 [0211.565] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\600__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0211.565] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAwX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njawx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0211.566] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0211.566] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0211.566] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.784] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0211.785] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0211.786] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.817] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0211.828] CloseHandle (hObject=0x1fc) returned 1 [0211.828] CloseHandle (hObject=0x204) returned 1 [0211.828] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\600__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAwX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njawx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0211.829] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAwX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njawx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0211.829] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="600__C~1.PRO")) returned 0x7d3018 [0211.829] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="600__C~1.PRO")) returned 0 [0211.829] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0211.829] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\600__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml")) returned 1 [0211.873] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\600__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\600__connections_cellular_sfr (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0211.873] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="601__C~1.PRO")) returned 1 [0211.873] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\601__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0211.873] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0211.874] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0211.874] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0211.874] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0211.973] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0211.975] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0211.976] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0211.999] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.013] CloseHandle (hObject=0x204) returned 1 [0212.014] CloseHandle (hObject=0x1fc) returned 1 [0212.014] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\601__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0212.015] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0212.015] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="601__C~1.PRO")) returned 0x7d2998 [0212.015] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915a79aa, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915a79aa, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915a79aa, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="601__C~1.PRO")) returned 0 [0212.015] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0212.015] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\601__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml")) returned 1 [0212.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\601__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\601__connections_cellular_sfr (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0212.016] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="602__C~1.PRO")) returned 1 [0212.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\602__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAyX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njayx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.018] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0212.018] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.018] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.084] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0212.086] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0212.087] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.110] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.121] CloseHandle (hObject=0x1fc) returned 1 [0212.121] CloseHandle (hObject=0x204) returned 1 [0212.121] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\602__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAyX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njayx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0212.122] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAyX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njayx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0212.122] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="602__C~1.PRO")) returned 0x7d2998 [0212.122] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="602__C~1.PRO")) returned 0 [0212.122] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0212.122] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\602__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml")) returned 1 [0212.123] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\602__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\602__connections_cellular_sfr (france)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0212.123] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="603__C~1.PRO")) returned 1 [0212.123] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\603__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAzX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njazx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.124] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0212.124] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.125] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.198] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0212.199] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0212.201] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.227] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.238] CloseHandle (hObject=0x204) returned 1 [0212.238] CloseHandle (hObject=0x1fc) returned 1 [0212.238] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\603__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAzX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njazx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0212.239] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjAzX19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njazx19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0212.239] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="603__C~1.PRO")) returned 0x7d2d58 [0212.239] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="603__C~1.PRO")) returned 0 [0212.239] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0212.239] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\603__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml")) returned 1 [0212.240] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\603__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\603__connections_cellular_sfr (france)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0212.240] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="604__C~1.PRO")) returned 1 [0212.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\604__connections_cellular_saunalahti (finland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA0X19D3256ZWN01W96c19DZW4sdW42cl9TYXV6YW421HRpIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja0x19d3256zwn01w96c19dzw4sdw42cl9tyxv6yw421hrpic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.242] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0212.242] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.242] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.338] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0212.340] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0212.341] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.365] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.376] CloseHandle (hObject=0x1fc) returned 1 [0212.376] CloseHandle (hObject=0x204) returned 1 [0212.376] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\604__connections_cellular_saunalahti (finland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA0X19D3256ZWN01W96c19DZW4sdW42cl9TYXV6YW421HRpIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja0x19d3256zwn01w96c19dzw4sdw42cl9tyxv6yw421hrpic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0212.380] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA0X19D3256ZWN01W96c19DZW4sdW42cl9TYXV6YW421HRpIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja0x19d3256zwn01w96c19dzw4sdw42cl9tyxv6yw421hrpic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0212.380] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="604__C~1.PRO")) returned 0x7d2b18 [0212.380] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="604__C~1.PRO")) returned 0 [0212.380] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0212.380] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\604__connections_cellular_saunalahti (finland)_i0$(__mvid)@wap.provxml")) returned 1 [0212.381] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\604__Connections_Cellular_Saunalahti (Finland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\604__connections_cellular_saunalahti (finland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0212.382] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="605__C~1.PRO")) returned 1 [0212.384] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\605__connections_cellular_saunalahti (finland)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.385] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA1X19D3256ZWN01W96c19DZW4sdW42cl9TYXV6YW421HRpIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja1x19d3256zwn01w96c19dzw4sdw42cl9tyxv6yw421hrpic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.385] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0212.385] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.386] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.451] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0212.452] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0212.453] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.477] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.488] CloseHandle (hObject=0x204) returned 1 [0212.488] CloseHandle (hObject=0x1fc) returned 1 [0212.488] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\605__connections_cellular_saunalahti (finland)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA1X19D3256ZWN01W96c19DZW4sdW42cl9TYXV6YW421HRpIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja1x19d3256zwn01w96c19dzw4sdw42cl9tyxv6yw421hrpic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0212.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA1X19D3256ZWN01W96c19DZW4sdW42cl9TYXV6YW421HRpIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja1x19d3256zwn01w96c19dzw4sdw42cl9tyxv6yw421hrpic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0212.489] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="605__C~1.PRO")) returned 0x7d2998 [0212.489] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="605__C~1.PRO")) returned 0 [0212.489] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0212.489] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\605__connections_cellular_saunalahti (finland)_i1$(__mvid)@wap.provxml")) returned 1 [0212.490] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\605__Connections_Cellular_Saunalahti (Finland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\605__connections_cellular_saunalahti (finland)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0212.490] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="606__C~1.PRO")) returned 1 [0212.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\606__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA2X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja2x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.492] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0212.492] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.572] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0212.574] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0212.575] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.683] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.695] CloseHandle (hObject=0x1fc) returned 1 [0212.695] CloseHandle (hObject=0x204) returned 1 [0212.695] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\606__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA2X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja2x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0212.696] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA2X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja2x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0212.696] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="606__C~1.PRO")) returned 0x7d3018 [0212.696] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915cdc15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915cdc15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915cdc15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="606__C~1.PRO")) returned 0 [0212.696] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0212.696] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\606__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml")) returned 1 [0212.697] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\606__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\606__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0212.697] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="607__C~1.PRO")) returned 1 [0212.698] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\607__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.698] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.699] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d5 [0212.699] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.699] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.806] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d5, lpOverlapped=0x0) returned 1 [0212.807] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0212.808] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.831] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.841] CloseHandle (hObject=0x204) returned 1 [0212.842] CloseHandle (hObject=0x1fc) returned 1 [0212.842] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\607__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0212.843] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0212.843] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="607__C~1.PRO")) returned 0x7d2d58 [0212.843] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="607__C~1.PRO")) returned 0 [0212.843] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0212.843] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\607__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0212.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\607__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\607__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0212.844] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="608__C~1.PRO")) returned 1 [0212.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\608__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA4X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja4x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.846] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2dc [0212.847] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.847] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0212.909] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2dc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2dc, lpOverlapped=0x0) returned 1 [0212.911] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0212.912] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0212.935] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0212.947] CloseHandle (hObject=0x1fc) returned 1 [0212.947] CloseHandle (hObject=0x204) returned 1 [0212.947] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\608__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA4X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja4x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0212.948] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA4X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja4x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0212.948] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="608__C~1.PRO")) returned 0x7d3098 [0212.948] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="608__C~1.PRO")) returned 0 [0212.948] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0212.948] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\608__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml")) returned 1 [0212.949] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\608__Connections_Cellular_Tata Docomo (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\608__connections_cellular_tata docomo (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0212.949] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml", cAlternateFileName="609__C~1.PRO")) returned 1 [0212.950] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\609__connections_cellular_tata docomo (india)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0212.950] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA5X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja5x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0212.951] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0212.951] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0212.951] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.018] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0213.020] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0213.021] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.044] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.055] CloseHandle (hObject=0x204) returned 1 [0213.055] CloseHandle (hObject=0x1fc) returned 1 [0213.055] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\609__connections_cellular_tata docomo (india)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA5X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja5x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0213.056] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjA5X19D3256ZWN01W96c19DZW4sdW42cl9UYXR2IERvY29t3yAoSW551WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nja5x19d3256zwn01w96c19dzw4sdw42cl9uyxr2iervy29t3yaosw551wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0213.056] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml", cAlternateFileName="609__C~1.PRO")) returned 0x7d3018 [0213.056] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml", cAlternateFileName="609__C~1.PRO")) returned 0 [0213.057] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0213.057] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\609__connections_cellular_tata docomo (india)_i1$(__mvid)@wap.provxml")) returned 1 [0213.058] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\609__Connections_Cellular_Tata Docomo (India)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\609__connections_cellular_tata docomo (india)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0213.058] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="60__CO~1.PRO")) returned 1 [0213.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\60__connections_cellular_mtel (bulgaria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.058] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX010ZWwgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njbfx0nv3m5ly3rp325zx0nl3g413gfyx010zwwgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.059] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0213.059] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.059] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.127] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0213.128] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0213.129] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.152] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.164] CloseHandle (hObject=0x1fc) returned 1 [0213.164] CloseHandle (hObject=0x204) returned 1 [0213.165] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\60__connections_cellular_mtel (bulgaria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX010ZWwgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njbfx0nv3m5ly3rp325zx0nl3g413gfyx010zwwgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0213.166] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX010ZWwgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njbfx0nv3m5ly3rp325zx0nl3g413gfyx010zwwgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0213.166] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="60__CO~1.PRO")) returned 0x7d3018 [0213.166] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="60__CO~1.PRO")) returned 0 [0213.166] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0213.166] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\60__connections_cellular_mtel (bulgaria)_i0$(__mvid)@wap.provxml")) returned 1 [0213.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\60__Connections_Cellular_Mtel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\60__connections_cellular_mtel (bulgaria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0213.167] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="610__C~1.PRO")) returned 1 [0213.167] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\610__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.168] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njewx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.168] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d5 [0213.168] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.168] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.276] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d5, lpOverlapped=0x0) returned 1 [0213.277] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0213.278] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.301] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.312] CloseHandle (hObject=0x204) returned 1 [0213.312] CloseHandle (hObject=0x1fc) returned 1 [0213.313] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\610__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njewx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0213.314] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njewx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0213.314] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="610__C~1.PRO")) returned 0x7d2998 [0213.314] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="610__C~1.PRO")) returned 0 [0213.314] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0213.314] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\610__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0213.315] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\610__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\610__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0213.315] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x0, cFileName="611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="611__C~1.PRO")) returned 1 [0213.316] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\611__connections_cellular_truphone (netherlands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.316] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE4X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje4x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.317] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x351 [0213.317] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.317] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.383] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x351, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x351, lpOverlapped=0x0) returned 1 [0213.386] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0213.387] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.412] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.423] CloseHandle (hObject=0x1fc) returned 1 [0213.423] CloseHandle (hObject=0x204) returned 1 [0213.423] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\611__connections_cellular_truphone (netherlands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE4X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje4x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0213.425] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE4X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje4x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0213.425] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="611__C~1.PRO")) returned 0x7d2b58 [0213.425] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x351, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="611__C~1.PRO")) returned 0 [0213.425] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0213.425] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\611__connections_cellular_truphone (netherlands)_i0$(__mvid)@wap.provxml")) returned 1 [0213.427] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\611__Connections_Cellular_Truphone (Netherlands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\611__connections_cellular_truphone (netherlands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0213.427] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="612__C~1.PRO")) returned 1 [0213.427] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\612__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.427] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njeyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.428] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0213.428] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.428] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.495] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0213.496] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0213.497] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.520] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.531] CloseHandle (hObject=0x204) returned 1 [0213.531] CloseHandle (hObject=0x1fc) returned 1 [0213.532] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\612__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njeyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0213.533] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njeyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0213.533] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="612__C~1.PRO")) returned 0x7d2d58 [0213.533] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x915f3e81, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x915f3e81, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x915f3e81, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="612__C~1.PRO")) returned 0 [0213.533] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0213.533] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\612__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0213.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\612__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\612__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0213.534] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="613__C~1.PRO")) returned 1 [0213.534] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\613__connections_cellular_truphone (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEzX19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njezx19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.536] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x354 [0213.536] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.536] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.625] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x354, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x354, lpOverlapped=0x0) returned 1 [0213.627] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0213.628] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.654] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.666] CloseHandle (hObject=0x1fc) returned 1 [0213.666] CloseHandle (hObject=0x204) returned 1 [0213.667] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\613__connections_cellular_truphone (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEzX19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njezx19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0213.668] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjEzX19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njezx19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0213.668] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="613__C~1.PRO")) returned 0x7d29d8 [0213.668] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="613__C~1.PRO")) returned 0 [0213.668] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0213.668] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\613__connections_cellular_truphone (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0213.669] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\613__Connections_Cellular_Truphone (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\613__connections_cellular_truphone (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0213.669] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="614__C~1.PRO")) returned 1 [0213.669] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\614__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.670] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.670] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0213.670] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.671] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.746] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0213.747] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0213.748] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.827] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.838] CloseHandle (hObject=0x204) returned 1 [0213.838] CloseHandle (hObject=0x1fc) returned 1 [0213.839] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\614__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0213.840] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0213.840] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="614__C~1.PRO")) returned 0x7d2c18 [0213.840] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="614__C~1.PRO")) returned 0 [0213.840] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0213.840] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\614__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0213.841] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\614__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\614__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0213.841] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="615__C~1.PRO")) returned 1 [0213.841] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\615__connections_cellular_truphone (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.841] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE1X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje1x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.842] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0213.842] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.842] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0213.908] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0213.909] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0213.910] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0213.934] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0213.945] CloseHandle (hObject=0x1fc) returned 1 [0213.945] CloseHandle (hObject=0x204) returned 1 [0213.945] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\615__connections_cellular_truphone (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE1X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje1x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0213.946] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE1X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje1x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0213.946] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="615__C~1.PRO")) returned 0x7d2b18 [0213.946] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="615__C~1.PRO")) returned 0 [0213.946] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0213.946] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\615__connections_cellular_truphone (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0213.947] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\615__Connections_Cellular_Truphone (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\615__connections_cellular_truphone (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0213.947] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="616__C~1.PRO")) returned 1 [0213.948] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\616__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0213.948] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0213.948] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0213.948] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0213.949] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.014] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0214.016] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0214.017] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.042] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.054] CloseHandle (hObject=0x204) returned 1 [0214.054] CloseHandle (hObject=0x1fc) returned 1 [0214.054] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\616__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0214.055] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0214.055] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="616__C~1.PRO")) returned 0x7d2b98 [0214.055] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9161a0f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9161a0f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9161a0f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="616__C~1.PRO")) returned 0 [0214.056] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0214.056] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\616__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0214.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\616__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\616__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0214.057] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="617__C~1.PRO")) returned 1 [0214.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\617__connections_cellular_truphone (australia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.057] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE3X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoQXVzdHJ23Gl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje3x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaoqxvzdhj23gl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.058] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34f [0214.058] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.058] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.124] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34f, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34f, lpOverlapped=0x0) returned 1 [0214.126] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0214.127] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.151] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.162] CloseHandle (hObject=0x1fc) returned 1 [0214.162] CloseHandle (hObject=0x204) returned 1 [0214.162] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\617__connections_cellular_truphone (australia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE3X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoQXVzdHJ23Gl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje3x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaoqxvzdhj23gl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0214.163] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE3X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoQXVzdHJ23Gl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje3x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaoqxvzdhj23gl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0214.163] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="617__C~1.PRO")) returned 0x7d3018 [0214.164] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="617__C~1.PRO")) returned 0 [0214.164] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0214.164] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\617__connections_cellular_truphone (australia)_i0$(__mvid)@wap.provxml")) returned 1 [0214.165] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\617__Connections_Cellular_Truphone (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\617__connections_cellular_truphone (australia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0214.165] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="618__C~1.PRO")) returned 1 [0214.165] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\618__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.165] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.166] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0214.166] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.166] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.270] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0214.271] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0214.272] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.295] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.306] CloseHandle (hObject=0x204) returned 1 [0214.306] CloseHandle (hObject=0x1fc) returned 1 [0214.306] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\618__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0214.307] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0214.307] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="618__C~1.PRO")) returned 0x7d2ad8 [0214.307] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="618__C~1.PRO")) returned 0 [0214.307] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0214.307] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\618__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0214.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\618__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\618__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0214.309] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="619__C~1.PRO")) returned 1 [0214.309] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\619__connections_cellular_truphone (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.309] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE5X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje5x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.310] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0214.310] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.313] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.379] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0214.380] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0214.382] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.404] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.417] CloseHandle (hObject=0x1fc) returned 1 [0214.418] CloseHandle (hObject=0x204) returned 1 [0214.418] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\619__connections_cellular_truphone (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE5X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje5x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0214.419] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjE5X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nje5x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0214.419] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="619__C~1.PRO")) returned 0x7d2918 [0214.419] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="619__C~1.PRO")) returned 0 [0214.419] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0214.419] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\619__connections_cellular_truphone (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0214.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\619__Connections_Cellular_Truphone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\619__connections_cellular_truphone (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0214.420] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="61__CO~1.PRO")) returned 1 [0214.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\61__connections_cellular_vivatel (bulgaria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.421] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZpdmF0ZWwgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njffx0nv3m5ly3rp325zx0nl3g413gfyx1zpdmf0zwwgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.422] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0214.422] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.422] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.489] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0214.491] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0214.492] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.515] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.526] CloseHandle (hObject=0x204) returned 1 [0214.526] CloseHandle (hObject=0x1fc) returned 1 [0214.526] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\61__connections_cellular_vivatel (bulgaria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZpdmF0ZWwgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njffx0nv3m5ly3rp325zx0nl3g413gfyx1zpdmf0zwwgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0214.527] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZpdmF0ZWwgKEJ13Gd2cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njffx0nv3m5ly3rp325zx0nl3g413gfyx1zpdmf0zwwgkej13gd2cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0214.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="61__CO~1.PRO")) returned 0x7d2a98 [0214.527] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x902e08bf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x902e08bf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x902e08bf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="61__CO~1.PRO")) returned 0 [0214.527] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0214.528] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\61__connections_cellular_vivatel (bulgaria)_i0$(__mvid)@wap.provxml")) returned 1 [0214.529] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\61__Connections_Cellular_Vivatel (Bulgaria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\61__connections_cellular_vivatel (bulgaria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0214.529] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="620__C~1.PRO")) returned 1 [0214.532] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\620__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.533] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njiwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.533] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0214.534] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.534] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.624] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0214.625] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0214.626] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.650] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.661] CloseHandle (hObject=0x1fc) returned 1 [0214.661] CloseHandle (hObject=0x204) returned 1 [0214.662] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\620__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njiwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0214.663] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njiwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0214.663] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="620__C~1.PRO")) returned 0x7d3018 [0214.663] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="620__C~1.PRO")) returned 0 [0214.663] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0214.663] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\620__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0214.664] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\620__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\620__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0214.664] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="621__C~1.PRO")) returned 1 [0214.664] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\621__connections_cellular_truphone (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.665] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI4X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji4x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.665] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34d [0214.665] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.666] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.743] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34d, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34d, lpOverlapped=0x0) returned 1 [0214.744] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0214.745] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.822] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.834] CloseHandle (hObject=0x204) returned 1 [0214.834] CloseHandle (hObject=0x1fc) returned 1 [0214.834] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\621__connections_cellular_truphone (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI4X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji4x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0214.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI4X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji4x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0214.835] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="621__C~1.PRO")) returned 0x7d3018 [0214.835] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="621__C~1.PRO")) returned 0 [0214.835] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0214.836] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\621__connections_cellular_truphone (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0214.837] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\621__Connections_Cellular_Truphone (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\621__connections_cellular_truphone (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0214.837] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="622__C~1.PRO")) returned 1 [0214.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\622__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.837] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njiyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.838] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0214.838] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.838] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0214.903] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0214.904] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0214.905] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0214.928] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0214.939] CloseHandle (hObject=0x1fc) returned 1 [0214.940] CloseHandle (hObject=0x204) returned 1 [0214.940] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\622__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njiyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0214.941] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIyX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njiyx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0214.941] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="622__C~1.PRO")) returned 0x7d29d8 [0214.941] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91640358, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91640358, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91640358, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="622__C~1.PRO")) returned 0 [0214.941] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0214.941] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\622__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0214.942] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\622__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\622__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0214.942] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x0, cFileName="623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="623__C~1.PRO")) returned 1 [0214.942] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\623__connections_cellular_truphone (spain)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0214.943] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIzX19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njizx19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0214.944] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34b [0214.944] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0214.944] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0215.010] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34b, lpOverlapped=0x0) returned 1 [0215.012] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0215.013] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0215.036] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.047] CloseHandle (hObject=0x204) returned 1 [0215.047] CloseHandle (hObject=0x1fc) returned 1 [0215.047] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\623__connections_cellular_truphone (spain)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIzX19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njizx19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0215.048] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjIzX19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoU3B21W4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njizx19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaou3b21w4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0215.048] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="623__C~1.PRO")) returned 0x7d3018 [0215.048] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml", cAlternateFileName="623__C~1.PRO")) returned 0 [0215.048] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0215.048] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\623__connections_cellular_truphone (spain)_i0$(__mvid)@wap.provxml")) returned 1 [0215.567] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\623__Connections_Cellular_Truphone (Spain)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\623__connections_cellular_truphone (spain)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0215.567] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="624__C~1.PRO")) returned 1 [0215.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\624__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0215.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0215.568] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0215.568] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0215.569] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0215.718] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0215.719] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0215.720] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0215.779] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.790] CloseHandle (hObject=0x1fc) returned 1 [0215.791] CloseHandle (hObject=0x204) returned 1 [0215.791] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\624__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0215.792] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0215.792] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="624__C~1.PRO")) returned 0x7d2a18 [0215.792] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="624__C~1.PRO")) returned 0 [0215.792] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0215.792] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\624__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0215.793] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\624__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\624__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0215.793] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="625__C~1.PRO")) returned 1 [0215.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\625__connections_cellular_truphone (poland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0215.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI1X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoUG9sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji1x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaoug9syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0215.795] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x34c [0215.795] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0215.795] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0215.863] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x34c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x34c, lpOverlapped=0x0) returned 1 [0215.865] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0215.866] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0215.889] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0215.900] CloseHandle (hObject=0x204) returned 1 [0215.900] CloseHandle (hObject=0x1fc) returned 1 [0215.900] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\625__connections_cellular_truphone (poland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI1X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoUG9sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji1x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaoug9syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0215.901] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI1X19D3256ZWN01W96c19DZW4sdW42cl9UcnVw1G96ZSAoUG9sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji1x19d3256zwn01w96c19dzw4sdw42cl9ucnvw1g96zsaoug9syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0215.901] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="625__C~1.PRO")) returned 0x7d3018 [0215.901] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="625__C~1.PRO")) returned 0 [0215.901] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0215.902] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\625__connections_cellular_truphone (poland)_i0$(__mvid)@wap.provxml")) returned 1 [0215.903] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\625__Connections_Cellular_Truphone (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\625__connections_cellular_truphone (poland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0215.903] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="626__C~1.PRO")) returned 1 [0215.903] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\626__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0215.903] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0215.904] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0215.904] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0215.904] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0215.972] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0215.973] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0215.974] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0215.997] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.010] CloseHandle (hObject=0x1fc) returned 1 [0216.010] CloseHandle (hObject=0x204) returned 1 [0216.010] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\626__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0216.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0216.011] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="626__C~1.PRO")) returned 0x7d3018 [0216.011] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="626__C~1.PRO")) returned 0 [0216.011] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0216.011] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\626__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0216.012] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\626__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\626__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0216.012] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="627__C~1.PRO")) returned 1 [0216.013] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\627__connections_cellular_telenet (belgium)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.013] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3mV0IC2CZW4n1XVtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji3x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3mv0ic2czw4n1xvtkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.014] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0216.014] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.014] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.082] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0216.083] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0216.084] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.108] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.119] CloseHandle (hObject=0x204) returned 1 [0216.119] CloseHandle (hObject=0x1fc) returned 1 [0216.119] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\627__connections_cellular_telenet (belgium)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3mV0IC2CZW4n1XVtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji3x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3mv0ic2czw4n1xvtkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0216.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3mV0IC2CZW4n1XVtKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji3x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3mv0ic2czw4n1xvtkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0216.121] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="627__C~1.PRO")) returned 0x7d2b18 [0216.121] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml", cAlternateFileName="627__C~1.PRO")) returned 0 [0216.121] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0216.121] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\627__connections_cellular_telenet (belgium)_i0$(__mvid)@wap.provxml")) returned 1 [0216.122] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\627__Connections_Cellular_Telenet (Belgium)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\627__connections_cellular_telenet (belgium)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0216.122] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="628__C~1.PRO")) returned 1 [0216.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\628__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.123] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c2 [0216.123] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.123] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.225] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c2, lpOverlapped=0x0) returned 1 [0216.226] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0216.227] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.251] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.263] CloseHandle (hObject=0x1fc) returned 1 [0216.263] CloseHandle (hObject=0x204) returned 1 [0216.263] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\628__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0216.264] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0216.264] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="628__C~1.PRO")) returned 0x7d3018 [0216.265] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916665c7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916665c7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916665c7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="628__C~1.PRO")) returned 0 [0216.265] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0216.265] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\628__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0216.266] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\628__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\628__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0216.266] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="629__C~1.PRO")) returned 1 [0216.266] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\629__connections_cellular_bell (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.267] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI5X19D3256ZWN01W96c19DZW4sdW42cl9CZW4sIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji5x19d3256zwn01w96c19dzw4sdw42cl9czw4sic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.276] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0216.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.277] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.362] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0216.364] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0216.367] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.392] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.404] CloseHandle (hObject=0x204) returned 1 [0216.405] CloseHandle (hObject=0x1fc) returned 1 [0216.405] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\629__connections_cellular_bell (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI5X19D3256ZWN01W96c19DZW4sdW42cl9CZW4sIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji5x19d3256zwn01w96c19dzw4sdw42cl9czw4sic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0216.407] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjI5X19D3256ZWN01W96c19DZW4sdW42cl9CZW4sIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nji5x19d3256zwn01w96c19dzw4sdw42cl9czw4sic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0216.407] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="629__C~1.PRO")) returned 0x7d3018 [0216.407] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="629__C~1.PRO")) returned 0 [0216.407] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0216.407] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\629__connections_cellular_bell (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0216.408] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\629__Connections_Cellular_Bell (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\629__connections_cellular_bell (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0216.409] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="62__CO~1.PRO")) returned 1 [0216.409] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\62__connections_cellular_mtn (cameroon)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.409] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX01UTiAoQ2FtZXJv324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njjfx0nv3m5ly3rp325zx0nl3g413gfyx01utiaoq2ftzxjv324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.410] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0216.410] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.411] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.479] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0216.480] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0216.481] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.505] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.516] CloseHandle (hObject=0x1fc) returned 1 [0216.516] CloseHandle (hObject=0x204) returned 1 [0216.516] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\62__connections_cellular_mtn (cameroon)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX01UTiAoQ2FtZXJv324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njjfx0nv3m5ly3rp325zx0nl3g413gfyx01utiaoq2ftzxjv324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0216.518] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX01UTiAoQ2FtZXJv324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njjfx0nv3m5ly3rp325zx0nl3g413gfyx01utiaoq2ftzxjv324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0216.518] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="62__CO~1.PRO")) returned 0x7d3018 [0216.519] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="62__CO~1.PRO")) returned 0 [0216.519] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0216.519] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\62__connections_cellular_mtn (cameroon)_i0$(__mvid)@wap.provxml")) returned 1 [0216.520] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\62__Connections_Cellular_MTN (Cameroon)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\62__connections_cellular_mtn (cameroon)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0216.520] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="630__C~1.PRO")) returned 1 [0216.520] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\630__connections_cellular_bell (canada)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.521] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMwX19D3256ZWN01W96c19DZW4sdW42cl9CZW4sIC2DYW52ZGEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmwx19d3256zwn01w96c19dzw4sdw42cl9czw4sic2dyw52zgepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.522] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0216.522] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.522] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.603] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0216.606] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0216.607] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.631] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.641] CloseHandle (hObject=0x204) returned 1 [0216.642] CloseHandle (hObject=0x1fc) returned 1 [0216.642] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\630__connections_cellular_bell (canada)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMwX19D3256ZWN01W96c19DZW4sdW42cl9CZW4sIC2DYW52ZGEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmwx19d3256zwn01w96c19dzw4sdw42cl9czw4sic2dyw52zgepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0216.644] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMwX19D3256ZWN01W96c19DZW4sdW42cl9CZW4sIC2DYW52ZGEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmwx19d3256zwn01w96c19dzw4sdw42cl9czw4sic2dyw52zgepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0216.644] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="630__C~1.PRO")) returned 0x7d2998 [0216.644] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="630__C~1.PRO")) returned 0 [0216.644] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0216.645] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\630__connections_cellular_bell (canada)_i1$(__mvid)@wap.provxml")) returned 1 [0216.646] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\630__Connections_Cellular_Bell (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\630__connections_cellular_bell (canada)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0216.646] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="631__C~1.PRO")) returned 1 [0216.646] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\631__connections_cellular_virgin (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.646] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM4X19D3256ZWN01W96c19DZW4sdW42cl9W1XJn1W4gKEN23mF5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm4x19d3256zwn01w96c19dzw4sdw42cl9w1xjn1w4gken23mf5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.647] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0216.647] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.648] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.802] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0216.803] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0216.804] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.827] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.841] CloseHandle (hObject=0x1fc) returned 1 [0216.841] CloseHandle (hObject=0x204) returned 1 [0216.842] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\631__connections_cellular_virgin (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM4X19D3256ZWN01W96c19DZW4sdW42cl9W1XJn1W4gKEN23mF5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm4x19d3256zwn01w96c19dzw4sdw42cl9w1xjn1w4gken23mf5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0216.843] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM4X19D3256ZWN01W96c19DZW4sdW42cl9W1XJn1W4gKEN23mF5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm4x19d3256zwn01w96c19dzw4sdw42cl9w1xjn1w4gken23mf5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0216.843] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="631__C~1.PRO")) returned 0x7d2998 [0216.843] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="631__C~1.PRO")) returned 0 [0216.843] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0216.843] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\631__connections_cellular_virgin (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0216.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\631__Connections_Cellular_Virgin (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\631__connections_cellular_virgin (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0216.844] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="632__C~1.PRO")) returned 1 [0216.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\632__connections_cellular_virgin (canada)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.845] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMyX19D3256ZWN01W96c19DZW4sdW42cl9W1XJn1W4gKEN23mF5YSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmyx19d3256zwn01w96c19dzw4sdw42cl9w1xjn1w4gken23mf5yslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.846] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0216.846] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.846] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0216.922] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0216.927] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0216.928] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0216.951] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0216.963] CloseHandle (hObject=0x204) returned 1 [0216.963] CloseHandle (hObject=0x1fc) returned 1 [0216.963] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\632__connections_cellular_virgin (canada)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMyX19D3256ZWN01W96c19DZW4sdW42cl9W1XJn1W4gKEN23mF5YSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmyx19d3256zwn01w96c19dzw4sdw42cl9w1xjn1w4gken23mf5yslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0216.964] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMyX19D3256ZWN01W96c19DZW4sdW42cl9W1XJn1W4gKEN23mF5YSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmyx19d3256zwn01w96c19dzw4sdw42cl9w1xjn1w4gken23mf5yslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0216.964] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="632__C~1.PRO")) returned 0x7d2a58 [0216.964] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9168c833, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="632__C~1.PRO")) returned 0 [0216.964] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0216.964] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\632__connections_cellular_virgin (canada)_i1$(__mvid)@wap.provxml")) returned 1 [0216.965] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\632__Connections_Cellular_Virgin (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\632__connections_cellular_virgin (canada)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0216.965] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="633__C~1.PRO")) returned 1 [0216.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\633__connections_cellular_solo (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0216.966] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMzX19D3256ZWN01W96c19DZW4sdW42cl9T324vIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmzx19d3256zwn01w96c19dzw4sdw42cl9t324vic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0216.967] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bf [0216.967] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0216.967] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.035] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bf, lpOverlapped=0x0) returned 1 [0217.036] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0217.038] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.062] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.073] CloseHandle (hObject=0x1fc) returned 1 [0217.073] CloseHandle (hObject=0x204) returned 1 [0217.073] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\633__connections_cellular_solo (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMzX19D3256ZWN01W96c19DZW4sdW42cl9T324vIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmzx19d3256zwn01w96c19dzw4sdw42cl9t324vic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0217.074] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjMzX19D3256ZWN01W96c19DZW4sdW42cl9T324vIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njmzx19d3256zwn01w96c19dzw4sdw42cl9t324vic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0217.074] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="633__C~1.PRO")) returned 0x7d2a58 [0217.075] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9168c833, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9168c833, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="633__C~1.PRO")) returned 0 [0217.075] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0217.075] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\633__connections_cellular_solo (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0217.076] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\633__Connections_Cellular_Solo (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\633__connections_cellular_solo (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0217.076] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="634__C~1.PRO")) returned 1 [0217.076] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\634__connections_cellular_pc mobile (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.076] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM0X19D3256ZWN01W96c19DZW4sdW42cl9QQyBN32Jp3GUgKEN23mF5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm0x19d3256zwn01w96c19dzw4sdw42cl9qqybn32jp3gugken23mf5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.077] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0217.077] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.078] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.148] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0217.150] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0217.151] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.174] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.185] CloseHandle (hObject=0x204) returned 1 [0217.185] CloseHandle (hObject=0x1fc) returned 1 [0217.185] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\634__connections_cellular_pc mobile (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM0X19D3256ZWN01W96c19DZW4sdW42cl9QQyBN32Jp3GUgKEN23mF5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm0x19d3256zwn01w96c19dzw4sdw42cl9qqybn32jp3gugken23mf5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0217.186] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM0X19D3256ZWN01W96c19DZW4sdW42cl9QQyBN32Jp3GUgKEN23mF5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm0x19d3256zwn01w96c19dzw4sdw42cl9qqybn32jp3gugken23mf5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0217.187] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="634__C~1.PRO")) returned 0x7d2a18 [0217.187] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="634__C~1.PRO")) returned 0 [0217.187] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0217.187] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\634__connections_cellular_pc mobile (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0217.188] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\634__Connections_Cellular_PC Mobile (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\634__connections_cellular_pc mobile (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0217.189] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="635__C~1.PRO")) returned 1 [0217.189] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\635__connections_cellular_3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.189] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm1x19d3256zwn01w96c19dzw4sdw42cl8zic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.190] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0217.190] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.191] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.298] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0217.300] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0217.301] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.324] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.338] CloseHandle (hObject=0x1fc) returned 1 [0217.338] CloseHandle (hObject=0x204) returned 1 [0217.338] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\635__connections_cellular_3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm1x19d3256zwn01w96c19dzw4sdw42cl8zic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0217.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm1x19d3256zwn01w96c19dzw4sdw42cl8zic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0217.340] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="635__C~1.PRO")) returned 0x7d2a98 [0217.340] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="635__C~1.PRO")) returned 0 [0217.340] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0217.340] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\635__connections_cellular_3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0217.341] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\635__Connections_Cellular_3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\635__connections_cellular_3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0217.341] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="636__C~1.PRO")) returned 1 [0217.343] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\636__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.344] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.345] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1cb [0217.345] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.345] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.413] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1cb, lpOverlapped=0x0) returned 1 [0217.416] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0217.417] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.440] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.451] CloseHandle (hObject=0x204) returned 1 [0217.452] CloseHandle (hObject=0x1fc) returned 1 [0217.452] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\636__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0217.453] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0217.453] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="636__C~1.PRO")) returned 0x7d2a18 [0217.453] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="636__C~1.PRO")) returned 0 [0217.453] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0217.453] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\636__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0217.454] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\636__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\636__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0217.454] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="637__C~1.PRO")) returned 1 [0217.454] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\637__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.455] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.543] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c0 [0217.543] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.543] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.614] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c0, lpOverlapped=0x0) returned 1 [0217.615] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0217.616] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.639] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.651] CloseHandle (hObject=0x1fc) returned 1 [0217.651] CloseHandle (hObject=0x204) returned 1 [0217.651] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\637__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0217.652] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0217.652] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="637__C~1.PRO")) returned 0x7d3018 [0217.652] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="637__C~1.PRO")) returned 0 [0217.652] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0217.652] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\637__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0217.653] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\637__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\637__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0217.653] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="638__C~1.PRO")) returned 1 [0217.654] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\638__connections_cellular_mico-p - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.654] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM4X19D3256ZWN01W96c19DZW4sdW42cl9N1WNvLVAgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm4x19d3256zwn01w96c19dzw4sdw42cl9n1wnvlvaglsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.655] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0217.655] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.655] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.756] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0217.757] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0217.758] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.826] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.837] CloseHandle (hObject=0x204) returned 1 [0217.837] CloseHandle (hObject=0x1fc) returned 1 [0217.837] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\638__connections_cellular_mico-p - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM4X19D3256ZWN01W96c19DZW4sdW42cl9N1WNvLVAgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm4x19d3256zwn01w96c19dzw4sdw42cl9n1wnvlvaglsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0217.838] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM4X19D3256ZWN01W96c19DZW4sdW42cl9N1WNvLVAgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm4x19d3256zwn01w96c19dzw4sdw42cl9n1wnvlvaglsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0217.838] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="638__C~1.PRO")) returned 0x7d2918 [0217.838] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916b2a9b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916b2a9b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916b2a9b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="638__C~1.PRO")) returned 0 [0217.838] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0217.838] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\638__connections_cellular_mico-p - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0217.839] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\638__Connections_Cellular_Mico-P - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\638__connections_cellular_mico-p - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0217.839] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="639__C~1.PRO")) returned 1 [0217.841] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\639__connections_cellular_mico-p - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.843] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM5X19D3256ZWN01W96c19DZW4sdW42cl9N1WNvLVAgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm5x19d3256zwn01w96c19dzw4sdw42cl9n1wnvlvaglsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.844] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0217.844] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.844] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0217.915] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0217.916] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0217.917] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0217.941] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0217.952] CloseHandle (hObject=0x1fc) returned 1 [0217.952] CloseHandle (hObject=0x204) returned 1 [0217.952] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\639__connections_cellular_mico-p - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM5X19D3256ZWN01W96c19DZW4sdW42cl9N1WNvLVAgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm5x19d3256zwn01w96c19dzw4sdw42cl9n1wnvlvaglsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0217.953] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjM5X19D3256ZWN01W96c19DZW4sdW42cl9N1WNvLVAgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njm5x19d3256zwn01w96c19dzw4sdw42cl9n1wnvlvaglsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0217.953] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="639__C~1.PRO")) returned 0x7d3018 [0217.953] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="639__C~1.PRO")) returned 0 [0217.954] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0217.954] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\639__connections_cellular_mico-p - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0217.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\639__Connections_Cellular_Mico-P - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\639__connections_cellular_mico-p - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0217.955] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="63__CO~1.PRO")) returned 1 [0217.955] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\63__connections_cellular_telus (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0217.955] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HVzIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njnfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hvzic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0217.956] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0217.956] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0217.957] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.024] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x285, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x285, lpOverlapped=0x0) returned 1 [0218.025] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0218.026] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.050] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.061] CloseHandle (hObject=0x204) returned 1 [0218.061] CloseHandle (hObject=0x1fc) returned 1 [0218.061] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\63__connections_cellular_telus (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HVzIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njnfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hvzic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0218.062] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HVzIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njnfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hvzic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0218.062] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="63__CO~1.PRO")) returned 0x7d2a58 [0218.062] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="63__CO~1.PRO")) returned 0 [0218.062] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0218.062] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\63__connections_cellular_telus (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0218.063] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\63__Connections_Cellular_Telus (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\63__connections_cellular_telus (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0218.064] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="640__C~1.PRO")) returned 1 [0218.064] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\640__connections_cellular_aql - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.064] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQwX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqwx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.066] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0218.066] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.066] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.165] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0218.166] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0218.167] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.191] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.202] CloseHandle (hObject=0x1fc) returned 1 [0218.203] CloseHandle (hObject=0x204) returned 1 [0218.203] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\640__connections_cellular_aql - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQwX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqwx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0218.204] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQwX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqwx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0218.204] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="640__C~1.PRO")) returned 0x7d2998 [0218.204] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="640__C~1.PRO")) returned 0 [0218.204] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0218.204] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\640__connections_cellular_aql - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0218.205] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\640__Connections_Cellular_AQL - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\640__connections_cellular_aql - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0218.205] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="641__C~1.PRO")) returned 1 [0218.206] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\641__connections_cellular_aql - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.206] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ4X19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq4x19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.207] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0218.207] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.207] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.272] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0218.274] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0218.275] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.297] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.309] CloseHandle (hObject=0x204) returned 1 [0218.309] CloseHandle (hObject=0x1fc) returned 1 [0218.309] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\641__connections_cellular_aql - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ4X19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq4x19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0218.310] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ4X19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq4x19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0218.310] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="641__C~1.PRO")) returned 0x7d2c98 [0218.310] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="641__C~1.PRO")) returned 0 [0218.310] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0218.310] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\641__connections_cellular_aql - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0218.311] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\641__Connections_Cellular_AQL - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\641__connections_cellular_aql - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0218.311] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="642__C~1.PRO")) returned 1 [0218.312] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\642__connections_cellular_aql - 3 (united kingdom)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.312] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQyX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqyx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.312] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0218.312] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.313] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.378] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0218.379] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0218.380] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.403] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.415] CloseHandle (hObject=0x1fc) returned 1 [0218.415] CloseHandle (hObject=0x204) returned 1 [0218.416] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\642__connections_cellular_aql - 3 (united kingdom)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQyX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqyx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0218.417] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQyX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqyx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0218.417] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="642__C~1.PRO")) returned 0x7d3018 [0218.417] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml", cAlternateFileName="642__C~1.PRO")) returned 0 [0218.417] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0218.417] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\642__connections_cellular_aql - 3 (united kingdom)_i2$(__mvid)@wap.provxml")) returned 1 [0218.418] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\642__Connections_Cellular_AQL - 3 (United Kingdom)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\642__connections_cellular_aql - 3 (united kingdom)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0218.418] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="643__C~1.PRO")) returned 1 [0218.418] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\643__connections_cellular_aql - 3 (united kingdom)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.419] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQzX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqzx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.419] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0218.419] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.420] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.511] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0218.512] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0218.513] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.538] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.551] CloseHandle (hObject=0x204) returned 1 [0218.551] CloseHandle (hObject=0x1fc) returned 1 [0218.551] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\643__connections_cellular_aql - 3 (united kingdom)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQzX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqzx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0218.552] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQzX19D3256ZWN01W96c19DZW4sdW42cl9BUUwgLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njqzx19d3256zwn01w96c19dzw4sdw42cl9buuwglsazic2v3ml0zwqgs2l6z2rv3slf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0218.552] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="643__C~1.PRO")) returned 0x7d2d58 [0218.552] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916d8d0a, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916d8d0a, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916d8d0a, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml", cAlternateFileName="643__C~1.PRO")) returned 0 [0218.552] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0218.552] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\643__connections_cellular_aql - 3 (united kingdom)_i3$(__mvid)@wap.provxml")) returned 1 [0218.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\643__Connections_Cellular_AQL - 3 (United Kingdom)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\643__connections_cellular_aql - 3 (united kingdom)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0218.553] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="644__C~1.PRO")) returned 1 [0218.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\644__connections_cellular_x-mobility - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ0X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gMyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq0x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gmyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.555] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0218.555] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.555] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.621] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0218.624] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0218.625] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.650] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.664] CloseHandle (hObject=0x1fc) returned 1 [0218.664] CloseHandle (hObject=0x204) returned 1 [0218.664] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\644__connections_cellular_x-mobility - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ0X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gMyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq0x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gmyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0218.665] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ0X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gMyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq0x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gmyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0218.665] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="644__C~1.PRO")) returned 0x7d3018 [0218.665] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="644__C~1.PRO")) returned 0 [0218.665] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0218.666] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\644__connections_cellular_x-mobility - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0218.667] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\644__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\644__connections_cellular_x-mobility - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0218.667] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="645__C~1.PRO")) returned 1 [0218.667] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\645__connections_cellular_x-mobility - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.667] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ1X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gMyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq1x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gmyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.668] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2db [0218.668] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.668] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.804] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2db, lpOverlapped=0x0) returned 1 [0218.805] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0218.806] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.830] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.843] CloseHandle (hObject=0x204) returned 1 [0218.843] CloseHandle (hObject=0x1fc) returned 1 [0218.843] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\645__connections_cellular_x-mobility - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ1X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gMyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq1x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gmyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0218.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ1X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gMyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq1x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gmyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0218.844] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="645__C~1.PRO")) returned 0x7d2d58 [0218.845] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="645__C~1.PRO")) returned 0 [0218.845] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0218.845] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\645__connections_cellular_x-mobility - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0218.846] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\645__Connections_Cellular_X-Mobility - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\645__connections_cellular_x-mobility - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0218.846] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="646__C~1.PRO")) returned 1 [0218.846] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\646__connections_cellular_macheen -3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ2X19D3256ZWN01W96c19DZW4sdW42cl9NYWNoZWV6IC0zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq2x19d3256zwn01w96c19dzw4sdw42cl9nywnozwv6ic0zic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.847] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d5 [0218.847] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.848] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0218.914] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d5, lpOverlapped=0x0) returned 1 [0218.940] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0218.941] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0218.964] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0218.975] CloseHandle (hObject=0x1fc) returned 1 [0218.975] CloseHandle (hObject=0x204) returned 1 [0218.976] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\646__connections_cellular_macheen -3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ2X19D3256ZWN01W96c19DZW4sdW42cl9NYWNoZWV6IC0zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq2x19d3256zwn01w96c19dzw4sdw42cl9nywnozwv6ic0zic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0218.977] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ2X19D3256ZWN01W96c19DZW4sdW42cl9NYWNoZWV6IC0zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq2x19d3256zwn01w96c19dzw4sdw42cl9nywnozwv6ic0zic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0218.977] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="646__C~1.PRO")) returned 0x7d2d58 [0218.977] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="646__C~1.PRO")) returned 0 [0218.977] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0218.977] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\646__connections_cellular_macheen -3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0218.978] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\646__Connections_Cellular_Macheen -3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\646__connections_cellular_macheen -3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0218.978] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="647__C~1.PRO")) returned 1 [0218.978] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\647__connections_cellular_macheen -3 (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0218.979] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ3X19D3256ZWN01W96c19DZW4sdW42cl9NYWNoZWV6IC0zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq3x19d3256zwn01w96c19dzw4sdw42cl9nywnozwv6ic0zic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0218.979] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0218.979] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0218.980] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.049] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0219.051] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0219.052] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.075] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.086] CloseHandle (hObject=0x204) returned 1 [0219.086] CloseHandle (hObject=0x1fc) returned 1 [0219.087] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\647__connections_cellular_macheen -3 (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ3X19D3256ZWN01W96c19DZW4sdW42cl9NYWNoZWV6IC0zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq3x19d3256zwn01w96c19dzw4sdw42cl9nywnozwv6ic0zic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0219.088] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ3X19D3256ZWN01W96c19DZW4sdW42cl9NYWNoZWV6IC0zIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq3x19d3256zwn01w96c19dzw4sdw42cl9nywnozwv6ic0zic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0219.088] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="647__C~1.PRO")) returned 0x7d2998 [0219.088] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x916fef72, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x916fef72, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x916fef72, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="647__C~1.PRO")) returned 0 [0219.088] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0219.088] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\647__connections_cellular_macheen -3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0219.089] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\647__Connections_Cellular_Macheen -3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\647__connections_cellular_macheen -3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0219.089] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="648__C~1.PRO")) returned 1 [0219.090] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\648__connections_cellular_voiamo - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.090] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ4X19D3256ZWN01W96c19DZW4sdW42cl9W32l23W8gLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq4x19d3256zwn01w96c19dzw4sdw42cl9w32l23w8glsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.091] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0219.091] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.091] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.187] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0219.188] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0219.189] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.212] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.223] CloseHandle (hObject=0x1fc) returned 1 [0219.223] CloseHandle (hObject=0x204) returned 1 [0219.224] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\648__connections_cellular_voiamo - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ4X19D3256ZWN01W96c19DZW4sdW42cl9W32l23W8gLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq4x19d3256zwn01w96c19dzw4sdw42cl9w32l23w8glsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0219.225] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ4X19D3256ZWN01W96c19DZW4sdW42cl9W32l23W8gLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq4x19d3256zwn01w96c19dzw4sdw42cl9w32l23w8glsazic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0219.225] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="648__C~1.PRO")) returned 0x7d3018 [0219.225] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="648__C~1.PRO")) returned 0 [0219.225] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0219.225] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\648__connections_cellular_voiamo - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0219.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\648__Connections_Cellular_Voiamo - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\648__connections_cellular_voiamo - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0219.226] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="649__C~1.PRO")) returned 1 [0219.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\649__connections_cellular_voiamo - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.227] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ5X19D3256ZWN01W96c19DZW4sdW42cl9W32l23W8gLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq5x19d3256zwn01w96c19dzw4sdw42cl9w32l23w8glsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.228] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0219.228] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.229] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.294] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0219.297] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0219.298] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.321] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.333] CloseHandle (hObject=0x204) returned 1 [0219.333] CloseHandle (hObject=0x1fc) returned 1 [0219.333] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\649__connections_cellular_voiamo - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ5X19D3256ZWN01W96c19DZW4sdW42cl9W32l23W8gLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq5x19d3256zwn01w96c19dzw4sdw42cl9w32l23w8glsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0219.334] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjQ5X19D3256ZWN01W96c19DZW4sdW42cl9W32l23W8gLSAzIC2V3ml0ZWQgS2l6Z2Rv3Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njq5x19d3256zwn01w96c19dzw4sdw42cl9w32l23w8glsazic2v3ml0zwqgs2l6z2rv3slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0219.335] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="649__C~1.PRO")) returned 0x7d2d58 [0219.335] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="649__C~1.PRO")) returned 0 [0219.335] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0219.335] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\649__connections_cellular_voiamo - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0219.336] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\649__Connections_Cellular_Voiamo - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\649__connections_cellular_voiamo - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0219.336] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="64__CO~1.PRO")) returned 1 [0219.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\64__connections_cellular_airtel-vodafone (channel islands)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.336] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0FpcnRl3C1W32R2Zm96ZSAoQ2223m5l3CBJc2423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njrfx0nv3m5ly3rp325zx0nl3g413gfyx0fpcnrl3c1w32r2zm96zsaoq2223m5l3cbjc2423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.337] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e3 [0219.337] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.337] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.404] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e3, lpOverlapped=0x0) returned 1 [0219.405] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0219.407] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.431] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.443] CloseHandle (hObject=0x1fc) returned 1 [0219.443] CloseHandle (hObject=0x204) returned 1 [0219.443] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\64__connections_cellular_airtel-vodafone (channel islands)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0FpcnRl3C1W32R2Zm96ZSAoQ2223m5l3CBJc2423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njrfx0nv3m5ly3rp325zx0nl3g413gfyx0fpcnrl3c1w32r2zm96zsaoq2223m5l3cbjc2423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0219.444] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0FpcnRl3C1W32R2Zm96ZSAoQ2223m5l3CBJc2423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njrfx0nv3m5ly3rp325zx0nl3g413gfyx0fpcnrl3c1w32r2zm96zsaoq2223m5l3cbjc2423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0219.444] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="64__CO~1.PRO")) returned 0x7d3018 [0219.444] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90306b27, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="64__CO~1.PRO")) returned 0 [0219.444] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0219.444] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\64__connections_cellular_airtel-vodafone (channel islands)_i0$(__mvid)@wap.provxml")) returned 1 [0219.446] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\64__Connections_Cellular_Airtel-Vodafone (Channel Islands)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\64__connections_cellular_airtel-vodafone (channel islands)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0219.446] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7c3f48, dwReserved1=0x0, cFileName="650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="650__C~1.PRO")) returned 1 [0219.448] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\650__connections_cellular_shebang - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.449] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUwX19D3256ZWN01W96c19DZW4sdW42cl9T1GViYW5nIC0gMyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuwx19d3256zwn01w96c19dzw4sdw42cl9t1gviyw5nic0gmyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.453] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0219.453] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.453] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.547] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0219.551] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0219.552] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.576] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.587] CloseHandle (hObject=0x204) returned 1 [0219.587] CloseHandle (hObject=0x1fc) returned 1 [0219.587] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\650__connections_cellular_shebang - 3 (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUwX19D3256ZWN01W96c19DZW4sdW42cl9T1GViYW5nIC0gMyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuwx19d3256zwn01w96c19dzw4sdw42cl9t1gviyw5nic0gmyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0219.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUwX19D3256ZWN01W96c19DZW4sdW42cl9T1GViYW5nIC0gMyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuwx19d3256zwn01w96c19dzw4sdw42cl9t1gviyw5nic0gmyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0219.589] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="650__C~1.PRO")) returned 0x7d3018 [0219.589] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="650__C~1.PRO")) returned 0 [0219.589] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0219.589] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\650__connections_cellular_shebang - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0219.590] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\650__Connections_Cellular_Shebang - 3 (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\650__connections_cellular_shebang - 3 (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0219.590] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="651__C~1.PRO")) returned 1 [0219.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\651__connections_cellular_shebang - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU4X19D3256ZWN01W96c19DZW4sdW42cl9T1GViYW5nIC0gMyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju4x19d3256zwn01w96c19dzw4sdw42cl9t1gviyw5nic0gmyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.591] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0219.591] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.592] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.659] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0219.661] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0219.662] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.685] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.697] CloseHandle (hObject=0x1fc) returned 1 [0219.697] CloseHandle (hObject=0x204) returned 1 [0219.697] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\651__connections_cellular_shebang - 3 (united kingdom)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU4X19D3256ZWN01W96c19DZW4sdW42cl9T1GViYW5nIC0gMyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju4x19d3256zwn01w96c19dzw4sdw42cl9t1gviyw5nic0gmyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0219.698] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU4X19D3256ZWN01W96c19DZW4sdW42cl9T1GViYW5nIC0gMyAoVW5pdGV5IEtp3md5320pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju4x19d3256zwn01w96c19dzw4sdw42cl9t1gviyw5nic0gmyaovw5pdgv5ietp3md5320px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0219.698] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="651__C~1.PRO")) returned 0x7d3018 [0219.698] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917251dd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917251dd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917251dd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml", cAlternateFileName="651__C~1.PRO")) returned 0 [0219.698] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0219.698] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\651__connections_cellular_shebang - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 1 [0219.699] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\651__Connections_Cellular_Shebang - 3 (United Kingdom)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\651__connections_cellular_shebang - 3 (united kingdom)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0219.699] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="652__C~1.PRO")) returned 1 [0219.700] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\652__connections_cellular_3roi (ireland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.700] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUyX19D3256ZWN01W96c19DZW4sdW42cl8zUm9JIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuyx19d3256zwn01w96c19dzw4sdw42cl8zum9jic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.701] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0219.701] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.701] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.825] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0219.826] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0219.827] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.852] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.864] CloseHandle (hObject=0x204) returned 1 [0219.864] CloseHandle (hObject=0x1fc) returned 1 [0219.864] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\652__connections_cellular_3roi (ireland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUyX19D3256ZWN01W96c19DZW4sdW42cl8zUm9JIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuyx19d3256zwn01w96c19dzw4sdw42cl8zum9jic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0219.865] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUyX19D3256ZWN01W96c19DZW4sdW42cl8zUm9JIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuyx19d3256zwn01w96c19dzw4sdw42cl8zum9jic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0219.865] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="652__C~1.PRO")) returned 0x7d3018 [0219.865] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="652__C~1.PRO")) returned 0 [0219.865] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0219.865] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\652__connections_cellular_3roi (ireland)_i0$(__mvid)@wap.provxml")) returned 1 [0219.866] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\652__Connections_Cellular_3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\652__connections_cellular_3roi (ireland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0219.866] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="653__C~1.PRO")) returned 1 [0219.867] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\653__connections_cellular_3roi (ireland)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.867] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUzX19D3256ZWN01W96c19DZW4sdW42cl8zUm9JIC2JcmVsYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuzx19d3256zwn01w96c19dzw4sdw42cl8zum9jic2jcmvsyw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.868] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c3 [0219.868] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.868] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0219.935] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c3, lpOverlapped=0x0) returned 1 [0219.937] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0219.938] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0219.961] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0219.973] CloseHandle (hObject=0x1fc) returned 1 [0219.973] CloseHandle (hObject=0x204) returned 1 [0219.974] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\653__connections_cellular_3roi (ireland)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUzX19D3256ZWN01W96c19DZW4sdW42cl8zUm9JIC2JcmVsYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuzx19d3256zwn01w96c19dzw4sdw42cl8zum9jic2jcmvsyw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0219.975] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjUzX19D3256ZWN01W96c19DZW4sdW42cl8zUm9JIC2JcmVsYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njuzx19d3256zwn01w96c19dzw4sdw42cl8zum9jic2jcmvsyw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0219.975] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="653__C~1.PRO")) returned 0x7d2c18 [0219.975] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="653__C~1.PRO")) returned 0 [0219.975] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0219.975] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\653__connections_cellular_3roi (ireland)_i1$(__mvid)@wap.provxml")) returned 1 [0219.976] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\653__Connections_Cellular_3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\653__connections_cellular_3roi (ireland)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0219.976] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="654__C~1.PRO")) returned 1 [0219.976] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\654__connections_cellular_x-mobility - 3roi (ireland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0219.977] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU0X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gM1JvSSAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju0x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gm1jvssaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0219.978] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d5 [0219.978] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0219.978] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.044] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d5, lpOverlapped=0x0) returned 1 [0220.045] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0220.046] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.070] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.081] CloseHandle (hObject=0x204) returned 1 [0220.081] CloseHandle (hObject=0x1fc) returned 1 [0220.082] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\654__connections_cellular_x-mobility - 3roi (ireland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU0X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gM1JvSSAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju0x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gm1jvssaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0220.083] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU0X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gM1JvSSAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju0x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gm1jvssaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0220.083] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="654__C~1.PRO")) returned 0x7d3018 [0220.083] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="654__C~1.PRO")) returned 0 [0220.083] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0220.083] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\654__connections_cellular_x-mobility - 3roi (ireland)_i0$(__mvid)@wap.provxml")) returned 1 [0220.084] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\654__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\654__connections_cellular_x-mobility - 3roi (ireland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0220.084] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="655__C~1.PRO")) returned 1 [0220.084] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\655__connections_cellular_x-mobility - 3roi (ireland)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.085] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU1X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gM1JvSSAoSXJl3GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju1x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gm1jvssaosxjl3gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.085] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d5 [0220.085] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.086] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.177] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d5, lpOverlapped=0x0) returned 1 [0220.178] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0220.180] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.204] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.215] CloseHandle (hObject=0x1fc) returned 1 [0220.215] CloseHandle (hObject=0x204) returned 1 [0220.215] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\655__connections_cellular_x-mobility - 3roi (ireland)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU1X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gM1JvSSAoSXJl3GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju1x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gm1jvssaosxjl3gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0220.216] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU1X19D3256ZWN01W96c19DZW4sdW42cl9YLU1vYmls1XR5IC0gM1JvSSAoSXJl3GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju1x19d3256zwn01w96c19dzw4sdw42cl9ylu1vymls1xr5ic0gm1jvssaosxjl3gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0220.216] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="655__C~1.PRO")) returned 0x7d29d8 [0220.216] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9174b44d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9174b44d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9174b44d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="655__C~1.PRO")) returned 0 [0220.216] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0220.217] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\655__connections_cellular_x-mobility - 3roi (ireland)_i1$(__mvid)@wap.provxml")) returned 1 [0220.218] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\655__Connections_Cellular_X-Mobility - 3RoI (Ireland)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\655__connections_cellular_x-mobility - 3roi (ireland)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0220.218] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="656__C~1.PRO")) returned 1 [0220.218] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\656__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.218] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU2X19D3256ZWN01W96c19DZW4sdW42cl9BSVMgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju2x19d3256zwn01w96c19dzw4sdw42cl9bsvmgkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.219] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ba [0220.219] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.219] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.287] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ba, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ba, lpOverlapped=0x0) returned 1 [0220.288] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0220.289] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.312] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.323] CloseHandle (hObject=0x204) returned 1 [0220.323] CloseHandle (hObject=0x1fc) returned 1 [0220.323] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\656__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU2X19D3256ZWN01W96c19DZW4sdW42cl9BSVMgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju2x19d3256zwn01w96c19dzw4sdw42cl9bsvmgkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0220.324] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU2X19D3256ZWN01W96c19DZW4sdW42cl9BSVMgKFRoYWlsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju2x19d3256zwn01w96c19dzw4sdw42cl9bsvmgkfroywlsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0220.324] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="656__C~1.PRO")) returned 0x7d2c58 [0220.324] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ba, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="656__C~1.PRO")) returned 0 [0220.324] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0220.324] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\656__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml")) returned 1 [0220.325] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\656__Connections_Cellular_AIS (Thailand)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\656__connections_cellular_ais (thailand)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0220.325] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="657__C~1.PRO")) returned 1 [0220.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\657__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.326] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d9 [0220.326] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.327] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.405] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d9, lpOverlapped=0x0) returned 1 [0220.406] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0220.407] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.430] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.441] CloseHandle (hObject=0x1fc) returned 1 [0220.441] CloseHandle (hObject=0x204) returned 1 [0220.441] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\657__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0220.442] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0220.442] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="657__C~1.PRO")) returned 0x7d3018 [0220.442] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="657__C~1.PRO")) returned 0 [0220.442] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0220.443] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\657__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0220.443] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\657__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\657__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0220.444] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="658__C~1.PRO")) returned 1 [0220.444] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\658__connections_cellular_fido (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.444] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU4X19D3256ZWN01W96c19DZW4sdW42cl9G1WRvIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju4x19d3256zwn01w96c19dzw4sdw42cl9g1wrvic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.445] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0220.445] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.445] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.541] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0220.543] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0220.544] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.584] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.595] CloseHandle (hObject=0x204) returned 1 [0220.595] CloseHandle (hObject=0x1fc) returned 1 [0220.595] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\658__connections_cellular_fido (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU4X19D3256ZWN01W96c19DZW4sdW42cl9G1WRvIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju4x19d3256zwn01w96c19dzw4sdw42cl9g1wrvic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0220.596] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU4X19D3256ZWN01W96c19DZW4sdW42cl9G1WRvIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju4x19d3256zwn01w96c19dzw4sdw42cl9g1wrvic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0220.596] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="658__C~1.PRO")) returned 0x7d2d58 [0220.596] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="658__C~1.PRO")) returned 0 [0220.596] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0220.596] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\658__connections_cellular_fido (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0220.597] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\658__Connections_Cellular_Fido (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\658__connections_cellular_fido (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0220.597] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="659__C~1.PRO")) returned 1 [0220.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\659__connections_cellular_fido (canada)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.598] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU5X19D3256ZWN01W96c19DZW4sdW42cl9G1WRvIC2DYW52ZGEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju5x19d3256zwn01w96c19dzw4sdw42cl9g1wrvic2dyw52zgepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.598] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0220.599] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.599] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.666] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0220.668] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0220.669] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.693] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.703] CloseHandle (hObject=0x1fc) returned 1 [0220.704] CloseHandle (hObject=0x204) returned 1 [0220.704] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\659__connections_cellular_fido (canada)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU5X19D3256ZWN01W96c19DZW4sdW42cl9G1WRvIC2DYW52ZGEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju5x19d3256zwn01w96c19dzw4sdw42cl9g1wrvic2dyw52zgepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0220.705] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjU5X19D3256ZWN01W96c19DZW4sdW42cl9G1WRvIC2DYW52ZGEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nju5x19d3256zwn01w96c19dzw4sdw42cl9g1wrvic2dyw52zgepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0220.706] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="659__C~1.PRO")) returned 0x7d2998 [0220.706] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml", cAlternateFileName="659__C~1.PRO")) returned 0 [0220.706] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0220.706] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\659__connections_cellular_fido (canada)_i1$(__mvid)@wap.provxml")) returned 1 [0220.707] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\659__Connections_Cellular_Fido (Canada)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\659__connections_cellular_fido (canada)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0220.707] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="65__CO~1.PRO")) returned 1 [0220.708] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\65__connections_cellular_claro (chile)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.708] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NsYXJvIC2D1GlsZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njvfx0nv3m5ly3rp325zx0nl3g413gfyx0nsyxjvic2d1glszslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.708] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f9 [0220.709] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.709] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.822] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f9, lpOverlapped=0x0) returned 1 [0220.824] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0220.825] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.860] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.871] CloseHandle (hObject=0x204) returned 1 [0220.871] CloseHandle (hObject=0x1fc) returned 1 [0220.871] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\65__connections_cellular_claro (chile)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NsYXJvIC2D1GlsZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njvfx0nv3m5ly3rp325zx0nl3g413gfyx0nsyxjvic2d1glszslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0220.872] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NsYXJvIC2D1GlsZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njvfx0nv3m5ly3rp325zx0nl3g413gfyx0nsyxjvic2d1glszslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0220.872] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="65__CO~1.PRO")) returned 0x7d3018 [0220.872] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90306b27, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90306b27, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2f9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="65__CO~1.PRO")) returned 0 [0220.872] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0220.872] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\65__connections_cellular_claro (chile)_i0$(__mvid)@wap.provxml")) returned 1 [0220.873] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\65__Connections_Cellular_Claro (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\65__connections_cellular_claro (chile)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0220.874] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="660__C~1.PRO")) returned 1 [0220.874] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\660__connections_cellular_chatr (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.874] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYwX19D3256ZWN01W96c19DZW4sdW42cl9D1GF0ciAoQ2F6YWR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njywx19d3256zwn01w96c19dzw4sdw42cl9d1gf0ciaoq2f6ywr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.875] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0220.875] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.875] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0220.945] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0220.946] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0220.947] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0220.970] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0220.981] CloseHandle (hObject=0x1fc) returned 1 [0220.981] CloseHandle (hObject=0x204) returned 1 [0220.982] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\660__connections_cellular_chatr (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYwX19D3256ZWN01W96c19DZW4sdW42cl9D1GF0ciAoQ2F6YWR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njywx19d3256zwn01w96c19dzw4sdw42cl9d1gf0ciaoq2f6ywr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0220.983] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYwX19D3256ZWN01W96c19DZW4sdW42cl9D1GF0ciAoQ2F6YWR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njywx19d3256zwn01w96c19dzw4sdw42cl9d1gf0ciaoq2f6ywr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0220.983] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="660__C~1.PRO")) returned 0x7d2ad8 [0220.983] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917716b4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917716b4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917716b4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="660__C~1.PRO")) returned 0 [0220.983] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0220.983] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\660__connections_cellular_chatr (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0220.984] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\660__Connections_Cellular_Chatr (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\660__connections_cellular_chatr (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0220.984] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="661__C~1.PRO")) returned 1 [0220.984] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\661__connections_cellular_cityfone (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0220.985] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY4X19D3256ZWN01W96c19DZW4sdW42cl9D1XR5Zm96ZSAoQ2F6YWR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy4x19d3256zwn01w96c19dzw4sdw42cl9d1xr5zm96zsaoq2f6ywr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0220.985] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0220.985] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0220.985] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.185] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0221.186] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0221.187] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0221.210] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.222] CloseHandle (hObject=0x204) returned 1 [0221.222] CloseHandle (hObject=0x1fc) returned 1 [0221.223] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\661__connections_cellular_cityfone (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY4X19D3256ZWN01W96c19DZW4sdW42cl9D1XR5Zm96ZSAoQ2F6YWR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy4x19d3256zwn01w96c19dzw4sdw42cl9d1xr5zm96zsaoq2f6ywr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0221.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY4X19D3256ZWN01W96c19DZW4sdW42cl9D1XR5Zm96ZSAoQ2F6YWR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy4x19d3256zwn01w96c19dzw4sdw42cl9d1xr5zm96zsaoq2f6ywr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0221.224] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="661__C~1.PRO")) returned 0x7d2998 [0221.224] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="661__C~1.PRO")) returned 0 [0221.224] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0221.224] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\661__connections_cellular_cityfone (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0221.225] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\661__Connections_Cellular_Cityfone (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\661__connections_cellular_cityfone (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0221.225] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x0, cFileName="662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="662__C~1.PRO")) returned 1 [0221.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\662__connections_cellular_hp datapass (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0221.226] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYyX19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njyyx19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0221.226] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x369 [0221.226] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0221.227] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.293] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x369, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x369, lpOverlapped=0x0) returned 1 [0221.295] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0221.296] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0221.320] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.331] CloseHandle (hObject=0x1fc) returned 1 [0221.331] CloseHandle (hObject=0x204) returned 1 [0221.331] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\662__connections_cellular_hp datapass (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYyX19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njyyx19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0221.332] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYyX19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoVW5pdGV5IFN0YXRlcylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njyyx19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaovw5pdgv5ifn0yxrlcylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0221.332] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="662__C~1.PRO")) returned 0x7d3018 [0221.332] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x369, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="662__C~1.PRO")) returned 0 [0221.332] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0221.332] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\662__connections_cellular_hp datapass (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0221.333] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\662__Connections_Cellular_HP DataPass (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\662__connections_cellular_hp datapass (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0221.333] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="663__C~1.PRO")) returned 1 [0221.334] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\663__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0221.334] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0221.335] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d4 [0221.335] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0221.335] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.402] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d4, lpOverlapped=0x0) returned 1 [0221.405] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0221.406] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0221.429] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.441] CloseHandle (hObject=0x204) returned 1 [0221.441] CloseHandle (hObject=0x1fc) returned 1 [0221.441] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\663__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0221.442] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0221.442] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="663__C~1.PRO")) returned 0x7d3018 [0221.442] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="663__C~1.PRO")) returned 0 [0221.443] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0221.443] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\663__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0221.444] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\663__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\663__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0221.444] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="664__C~1.PRO")) returned 1 [0221.444] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\664__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0221.444] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0221.445] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c6 [0221.445] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0221.445] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.545] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c6, lpOverlapped=0x0) returned 1 [0221.546] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0221.547] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0221.573] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.585] CloseHandle (hObject=0x1fc) returned 1 [0221.585] CloseHandle (hObject=0x204) returned 1 [0221.585] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\664__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0221.586] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0221.586] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="664__C~1.PRO")) returned 0x7d2c18 [0221.587] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="664__C~1.PRO")) returned 0 [0221.587] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0221.587] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\664__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0221.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\664__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\664__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0221.588] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x36a, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="665__C~1.PRO")) returned 1 [0221.588] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\665__connections_cellular_hp datapass (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0221.588] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY1X19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy1x19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0221.589] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x36a [0221.589] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0221.590] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.664] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x36a, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x36a, lpOverlapped=0x0) returned 1 [0221.666] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0221.667] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0221.776] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.831] CloseHandle (hObject=0x204) returned 1 [0221.831] CloseHandle (hObject=0x1fc) returned 1 [0221.831] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\665__connections_cellular_hp datapass (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY1X19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy1x19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0221.832] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY1X19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoVW5pdGV5IEtp3md5320pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy1x19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaovw5pdgv5ietp3md5320px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0221.832] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x36a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="665__C~1.PRO")) returned 0x7d2c98 [0221.832] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x36a, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="665__C~1.PRO")) returned 0 [0221.832] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0221.833] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\665__connections_cellular_hp datapass (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0221.834] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\665__Connections_Cellular_HP DataPass (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\665__connections_cellular_hp datapass (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0221.834] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="666__C~1.PRO")) returned 1 [0221.863] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\666__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0221.864] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0221.865] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d4 [0221.865] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0221.865] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.911] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d4, lpOverlapped=0x0) returned 1 [0221.912] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0221.914] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0221.917] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0221.918] CloseHandle (hObject=0x1fc) returned 1 [0221.918] CloseHandle (hObject=0x204) returned 1 [0221.919] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\666__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0221.920] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0221.920] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="666__C~1.PRO")) returned 0x7d2998 [0221.920] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="666__C~1.PRO")) returned 0 [0221.920] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0221.920] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\666__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0221.921] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\666__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\666__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0221.921] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="667__C~1.PRO")) returned 1 [0221.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\667__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0221.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0221.922] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c6 [0221.922] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0221.922] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0221.986] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c6, lpOverlapped=0x0) returned 1 [0221.987] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0221.988] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.013] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.024] CloseHandle (hObject=0x204) returned 1 [0222.025] CloseHandle (hObject=0x1fc) returned 1 [0222.025] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\667__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0222.026] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0222.026] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="667__C~1.PRO")) returned 0x7d3018 [0222.026] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91797924, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91797924, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91797924, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="667__C~1.PRO")) returned 0 [0222.026] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0222.026] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\667__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0222.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\667__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\667__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0222.027] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="668__C~1.PRO")) returned 1 [0222.028] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\668__connections_cellular_hp datapass (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.028] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY4X19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy4x19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.029] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x362 [0222.029] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.029] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0222.096] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x362, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x362, lpOverlapped=0x0) returned 1 [0222.099] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0222.100] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.123] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.137] CloseHandle (hObject=0x1fc) returned 1 [0222.137] CloseHandle (hObject=0x204) returned 1 [0222.138] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\668__connections_cellular_hp datapass (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY4X19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy4x19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0222.139] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY4X19D3256ZWN01W96c19DZW4sdW42cl9IUCBEYXR2UGFzcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy4x19d3256zwn01w96c19dzw4sdw42cl9iucbeyxr2ugfzcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0222.139] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="668__C~1.PRO")) returned 0x7d2cd8 [0222.139] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x362, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="668__C~1.PRO")) returned 0 [0222.139] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0222.139] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\668__connections_cellular_hp datapass (france)_i0$(__mvid)@wap.provxml")) returned 1 [0222.140] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\668__Connections_Cellular_HP DataPass (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\668__connections_cellular_hp datapass (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0222.140] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="669__C~1.PRO")) returned 1 [0222.140] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\669__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.141] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.141] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d4 [0222.141] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.142] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0222.216] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d4, lpOverlapped=0x0) returned 1 [0222.218] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0222.219] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.242] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.253] CloseHandle (hObject=0x204) returned 1 [0222.253] CloseHandle (hObject=0x1fc) returned 1 [0222.253] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\669__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0222.254] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0222.254] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="669__C~1.PRO")) returned 0x7d2a98 [0222.254] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="669__C~1.PRO")) returned 0 [0222.254] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0222.255] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\669__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0222.256] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\669__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\669__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0222.256] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="66__CO~1.PRO")) returned 1 [0222.256] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\66__connections_cellular_entel pcs (chile)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.256] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0V6dGVsIFBDUyAoQ22p3GUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njzfx0nv3m5ly3rp325zx0nl3g413gfyx0v6dgvsifbduyaoq22p3gupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.395] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x353 [0222.395] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.395] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0222.463] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x353, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x353, lpOverlapped=0x0) returned 1 [0222.465] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0222.466] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.489] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.500] CloseHandle (hObject=0x1fc) returned 1 [0222.500] CloseHandle (hObject=0x204) returned 1 [0222.500] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\66__connections_cellular_entel pcs (chile)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0V6dGVsIFBDUyAoQ22p3GUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njzfx0nv3m5ly3rp325zx0nl3g413gfyx0v6dgvsifbduyaoq22p3gupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0222.501] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0V6dGVsIFBDUyAoQ22p3GUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njzfx0nv3m5ly3rp325zx0nl3g413gfyx0v6dgvsifbduyaoq22p3gupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0222.502] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="66__CO~1.PRO")) returned 0x7d2d58 [0222.502] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="66__CO~1.PRO")) returned 0 [0222.502] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0222.502] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\66__connections_cellular_entel pcs (chile)_i0$(__mvid)@wap.provxml")) returned 1 [0222.503] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\66__Connections_Cellular_Entel PCS (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\66__connections_cellular_entel pcs (chile)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0222.503] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="670__C~1.PRO")) returned 1 [0222.503] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\670__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.503] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjcwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njcwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.504] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c6 [0222.504] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.504] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0222.575] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c6, lpOverlapped=0x0) returned 1 [0222.576] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0222.577] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.600] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.612] CloseHandle (hObject=0x204) returned 1 [0222.612] CloseHandle (hObject=0x1fc) returned 1 [0222.612] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\670__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjcwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njcwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0222.613] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjcwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njcwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0222.613] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="670__C~1.PRO")) returned 0x7d3098 [0222.613] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="670__C~1.PRO")) returned 0 [0222.613] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0222.613] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\670__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0222.614] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\670__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\670__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0222.614] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="671__C~1.PRO")) returned 1 [0222.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\671__connections_cellular_dell (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc4X19D3256ZWN01W96c19DZW4sdW42cl9EZW4sIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc4x19d3256zwn01w96c19dzw4sdw42cl9ezw4sic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.616] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0222.616] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.616] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0222.719] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0222.721] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0222.722] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.745] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.756] CloseHandle (hObject=0x1fc) returned 1 [0222.756] CloseHandle (hObject=0x204) returned 1 [0222.757] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\671__connections_cellular_dell (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc4X19D3256ZWN01W96c19DZW4sdW42cl9EZW4sIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc4x19d3256zwn01w96c19dzw4sdw42cl9ezw4sic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0222.779] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc4X19D3256ZWN01W96c19DZW4sdW42cl9EZW4sIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc4x19d3256zwn01w96c19dzw4sdw42cl9ezw4sic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0222.779] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="671__C~1.PRO")) returned 0x7d2c98 [0222.779] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="671__C~1.PRO")) returned 0 [0222.779] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0222.779] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\671__connections_cellular_dell (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0222.781] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\671__Connections_Cellular_Dell (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\671__connections_cellular_dell (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0222.781] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="672__C~1.PRO")) returned 1 [0222.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\672__connections_cellular_dell (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.784] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjcyX19D3256ZWN01W96c19DZW4sdW42cl9EZW4sIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njcyx19d3256zwn01w96c19dzw4sdw42cl9ezw4sic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.785] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d8 [0222.785] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.786] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0222.900] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d8, lpOverlapped=0x0) returned 1 [0222.905] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0222.906] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0222.931] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0222.943] CloseHandle (hObject=0x204) returned 1 [0222.943] CloseHandle (hObject=0x1fc) returned 1 [0222.944] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\672__connections_cellular_dell (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjcyX19D3256ZWN01W96c19DZW4sdW42cl9EZW4sIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njcyx19d3256zwn01w96c19dzw4sdw42cl9ezw4sic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0222.948] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjcyX19D3256ZWN01W96c19DZW4sdW42cl9EZW4sIC2V3ml0ZWQgS2l6Z2Rv3Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njcyx19d3256zwn01w96c19dzw4sdw42cl9ezw4sic2v3ml0zwqgs2l6z2rv3slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0222.948] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="672__C~1.PRO")) returned 0x7d2c58 [0222.948] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917bdb8f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917bdb8f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917bdb8f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="672__C~1.PRO")) returned 0 [0222.948] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0222.948] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\672__connections_cellular_dell (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0222.949] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\672__Connections_Cellular_Dell (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\672__connections_cellular_dell (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0222.949] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="673__C~1.PRO")) returned 1 [0222.950] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\673__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0222.950] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjczX19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njczx19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0222.951] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0222.951] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0222.951] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.019] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0223.020] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0223.022] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.046] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.057] CloseHandle (hObject=0x1fc) returned 1 [0223.057] CloseHandle (hObject=0x204) returned 1 [0223.057] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\673__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjczX19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njczx19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0223.058] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjczX19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njczx19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0223.059] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="673__C~1.PRO")) returned 0x7d3018 [0223.059] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="673__C~1.PRO")) returned 0 [0223.059] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0223.059] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\673__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml")) returned 1 [0223.060] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\673__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\673__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.060] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml", cAlternateFileName="674__C~1.PRO")) returned 1 [0223.060] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\674__connections_cellular_lg u+ (korea)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc0X19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc0x19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.062] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d2 [0223.062] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.062] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.131] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d2, lpOverlapped=0x0) returned 1 [0223.133] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0223.134] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.158] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.169] CloseHandle (hObject=0x204) returned 1 [0223.169] CloseHandle (hObject=0x1fc) returned 1 [0223.169] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\674__connections_cellular_lg u+ (korea)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc0X19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc0x19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0223.170] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc0X19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc0x19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0223.170] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml", cAlternateFileName="674__C~1.PRO")) returned 0x7d3018 [0223.170] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml", cAlternateFileName="674__C~1.PRO")) returned 0 [0223.170] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0223.170] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\674__connections_cellular_lg u+ (korea)_i1$(__mvid)@wap.provxml")) returned 1 [0223.171] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\674__Connections_Cellular_LG U+ (Korea)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\674__connections_cellular_lg u+ (korea)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0223.171] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="675__C~1.PRO")) returned 1 [0223.172] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\675__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.172] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc1X19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc1x19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.176] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0223.176] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.176] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.240] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0223.242] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0223.243] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.245] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.247] CloseHandle (hObject=0x1fc) returned 1 [0223.247] CloseHandle (hObject=0x204) returned 1 [0223.247] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\675__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc1X19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc1x19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0223.248] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc1X19D3256ZWN01W96c19DZW4sdW42cl9MRyBVKyAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc1x19d3256zwn01w96c19dzw4sdw42cl9mrybvkyaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0223.248] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="675__C~1.PRO")) returned 0x7d3018 [0223.248] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="675__C~1.PRO")) returned 0 [0223.248] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0223.248] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\675__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml")) returned 1 [0223.249] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\675__Connections_Cellular_LG U+ (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\675__connections_cellular_lg u+ (korea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.249] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="676__C~1.PRO")) returned 1 [0223.249] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\676__connections_cellular_lenovo (germany)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc2X19D3256ZWN01W96c19DZW4sdW42cl9MZW5vdm8gKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc2x19d3256zwn01w96c19dzw4sdw42cl9mzw5vdm8gkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.250] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0223.250] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.251] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.320] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0223.321] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0223.322] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.345] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.358] CloseHandle (hObject=0x204) returned 1 [0223.358] CloseHandle (hObject=0x1fc) returned 1 [0223.358] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\676__connections_cellular_lenovo (germany)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc2X19D3256ZWN01W96c19DZW4sdW42cl9MZW5vdm8gKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc2x19d3256zwn01w96c19dzw4sdw42cl9mzw5vdm8gkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0223.359] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc2X19D3256ZWN01W96c19DZW4sdW42cl9MZW5vdm8gKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc2x19d3256zwn01w96c19dzw4sdw42cl9mzw5vdm8gkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0223.359] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="676__C~1.PRO")) returned 0x7d3018 [0223.359] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x917e3dfb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x917e3dfb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x917e3dfb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="676__C~1.PRO")) returned 0 [0223.359] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0223.359] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\676__connections_cellular_lenovo (germany)_i0$(__mvid)@wap.provxml")) returned 1 [0223.360] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\676__Connections_Cellular_Lenovo (Germany)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\676__connections_cellular_lenovo (germany)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.360] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="677__C~1.PRO")) returned 1 [0223.361] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\677__connections_cellular_lenovo (united kingdom)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.361] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc3X19D3256ZWN01W96c19DZW4sdW42cl9MZW5vdm8gKFV61XRlZCBL1W5nZG9tKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc3x19d3256zwn01w96c19dzw4sdw42cl9mzw5vdm8gkfv61xrlzcbl1w5nzg9tkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.362] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0223.362] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.362] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.467] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0223.468] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0223.469] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.517] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.532] CloseHandle (hObject=0x1fc) returned 1 [0223.532] CloseHandle (hObject=0x204) returned 1 [0223.533] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\677__connections_cellular_lenovo (united kingdom)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc3X19D3256ZWN01W96c19DZW4sdW42cl9MZW5vdm8gKFV61XRlZCBL1W5nZG9tKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc3x19d3256zwn01w96c19dzw4sdw42cl9mzw5vdm8gkfv61xrlzcbl1w5nzg9tkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0223.534] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc3X19D3256ZWN01W96c19DZW4sdW42cl9MZW5vdm8gKFV61XRlZCBL1W5nZG9tKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc3x19d3256zwn01w96c19dzw4sdw42cl9mzw5vdm8gkfv61xrlzcbl1w5nzg9tkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0223.534] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="677__C~1.PRO")) returned 0x7d2c98 [0223.534] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml", cAlternateFileName="677__C~1.PRO")) returned 0 [0223.534] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0223.534] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\677__connections_cellular_lenovo (united kingdom)_i0$(__mvid)@wap.provxml")) returned 1 [0223.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\677__Connections_Cellular_Lenovo (United Kingdom)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\677__connections_cellular_lenovo (united kingdom)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.535] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="678__C~1.PRO")) returned 1 [0223.535] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\678__connections_cellular_kt (korea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc4X19D3256ZWN01W96c19DZW4sdW42cl9rdCAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc4x19d3256zwn01w96c19dzw4sdw42cl9rdcaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.536] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bf [0223.537] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.537] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.605] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bf, lpOverlapped=0x0) returned 1 [0223.610] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0223.611] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.635] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.646] CloseHandle (hObject=0x204) returned 1 [0223.646] CloseHandle (hObject=0x1fc) returned 1 [0223.646] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\678__connections_cellular_kt (korea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc4X19D3256ZWN01W96c19DZW4sdW42cl9rdCAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc4x19d3256zwn01w96c19dzw4sdw42cl9rdcaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0223.647] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc4X19D3256ZWN01W96c19DZW4sdW42cl9rdCAoS29yZWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc4x19d3256zwn01w96c19dzw4sdw42cl9rdcaos29yzwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0223.647] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="678__C~1.PRO")) returned 0x7d2c98 [0223.647] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="678__C~1.PRO")) returned 0 [0223.647] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0223.647] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\678__connections_cellular_kt (korea)_i0$(__mvid)@wap.provxml")) returned 1 [0223.650] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\678__Connections_Cellular_kt (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\678__connections_cellular_kt (korea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.650] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x381, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="679__C~1.PRO")) returned 1 [0223.651] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\679__connections_cellular_y!mobile (japan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.651] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc5X19D3256ZWN01W96c19DZW4sdW42cl9ZIW1vYmlsZSAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc5x19d3256zwn01w96c19dzw4sdw42cl9ziw1vymlszsaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.652] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x381 [0223.652] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.652] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.719] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x381, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x381, lpOverlapped=0x0) returned 1 [0223.720] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0223.721] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.746] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.765] CloseHandle (hObject=0x1fc) returned 1 [0223.766] CloseHandle (hObject=0x204) returned 1 [0223.766] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\679__connections_cellular_y!mobile (japan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc5X19D3256ZWN01W96c19DZW4sdW42cl9ZIW1vYmlsZSAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc5x19d3256zwn01w96c19dzw4sdw42cl9ziw1vymlszsaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0223.767] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njc5X19D3256ZWN01W96c19DZW4sdW42cl9ZIW1vYmlsZSAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njc5x19d3256zwn01w96c19dzw4sdw42cl9ziw1vymlszsaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0223.767] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x381, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="679__C~1.PRO")) returned 0x7d2cd8 [0223.767] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x381, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="679__C~1.PRO")) returned 0 [0223.767] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0223.767] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\679__connections_cellular_y!mobile (japan)_i0$(__mvid)@wap.provxml")) returned 1 [0223.768] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\679__Connections_Cellular_Y!mobile (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\679__connections_cellular_y!mobile (japan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.768] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="67__CO~1.PRO")) returned 1 [0223.769] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\67__connections_cellular_telefonica (chile)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.769] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GVm325pY2EgKENo1W4lKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njdfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gvm325py2egkeno1w4lkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.770] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0223.770] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.770] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0223.892] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0223.893] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0223.895] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0223.920] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0223.931] CloseHandle (hObject=0x204) returned 1 [0223.931] CloseHandle (hObject=0x1fc) returned 1 [0223.931] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\67__connections_cellular_telefonica (chile)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GVm325pY2EgKENo1W4lKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njdfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gvm325py2egkeno1w4lkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0223.932] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GVm325pY2EgKENo1W4lKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njdfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gvm325py2egkeno1w4lkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0223.933] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="67__CO~1.PRO")) returned 0x7d3098 [0223.933] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml", cAlternateFileName="67__CO~1.PRO")) returned 0 [0223.933] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0223.933] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\67__connections_cellular_telefonica (chile)_i0$(__mvid)@wap.provxml")) returned 1 [0223.934] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\67__Connections_Cellular_Telefonica (Chile)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\67__connections_cellular_telefonica (chile)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0223.934] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="680__C~1.PRO")) returned 1 [0223.934] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\680__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0223.934] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0223.935] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c3 [0223.935] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0223.935] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.001] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c3, lpOverlapped=0x0) returned 1 [0224.003] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0224.004] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.027] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.041] CloseHandle (hObject=0x1fc) returned 1 [0224.041] CloseHandle (hObject=0x204) returned 1 [0224.041] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\680__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0224.042] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0224.042] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="680__C~1.PRO")) returned 0x7d2b18 [0224.042] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="680__C~1.PRO")) returned 0 [0224.042] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0224.043] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\680__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0224.043] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\680__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\680__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0224.044] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="681__C~1.PRO")) returned 1 [0224.044] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\681__connections_cellular_sk telecom ltd. (korea)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.045] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg4X19D3256ZWN01W96c19DZW4sdW42cl9TSyBUZW4lY29tIE40ZC4gKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg4x19d3256zwn01w96c19dzw4sdw42cl9tsybuzw4ly29tie40zc4gketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.045] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29b [0224.045] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.046] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.112] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x29b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x29b, lpOverlapped=0x0) returned 1 [0224.113] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0224.114] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.139] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.150] CloseHandle (hObject=0x204) returned 1 [0224.150] CloseHandle (hObject=0x1fc) returned 1 [0224.150] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\681__connections_cellular_sk telecom ltd. (korea)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg4X19D3256ZWN01W96c19DZW4sdW42cl9TSyBUZW4lY29tIE40ZC4gKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg4x19d3256zwn01w96c19dzw4sdw42cl9tsybuzw4ly29tie40zc4gketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0224.151] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg4X19D3256ZWN01W96c19DZW4sdW42cl9TSyBUZW4lY29tIE40ZC4gKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg4x19d3256zwn01w96c19dzw4sdw42cl9tsybuzw4ly29tie40zc4gketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0224.151] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="681__C~1.PRO")) returned 0x7d2d58 [0224.152] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9180a066, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9180a066, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9180a066, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="681__C~1.PRO")) returned 0 [0224.152] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0224.152] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\681__connections_cellular_sk telecom ltd. (korea)_i0$(__mvid)@wap.provxml")) returned 1 [0224.153] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\681__Connections_Cellular_SK Telecom Ltd. (Korea)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\681__connections_cellular_sk telecom ltd. (korea)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0224.153] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x0, cFileName="682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="682__C~1.PRO")) returned 1 [0224.155] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\682__connections_cellular_claro (brazil)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.156] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgyx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.156] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x345 [0224.156] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.157] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.266] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x345, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x345, lpOverlapped=0x0) returned 1 [0224.267] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0224.268] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.292] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.303] CloseHandle (hObject=0x1fc) returned 1 [0224.303] CloseHandle (hObject=0x204) returned 1 [0224.303] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\682__connections_cellular_claro (brazil)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgyx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0224.305] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoQnJ27mlsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgyx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaoqnj27mlskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0224.305] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="682__C~1.PRO")) returned 0x7d2a18 [0224.305] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x345, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml", cAlternateFileName="682__C~1.PRO")) returned 0 [0224.305] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0224.305] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\682__connections_cellular_claro (brazil)_i0$(__mvid)@wap.provxml")) returned 1 [0224.306] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\682__Connections_Cellular_Claro (Brazil)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\682__connections_cellular_claro (brazil)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0224.306] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="683__C~1.PRO")) returned 1 [0224.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\683__connections_cellular_kddi corporation (japan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgzX19D3256ZWN01W96c19DZW4sdW42cl9LRERJIENvcnBvcmF01W96IC2KYXB23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgzx19d3256zwn01w96c19dzw4sdw42cl9lrerjienvcnbvcmf01w96ic2kyxb23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.308] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3ea [0224.308] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.308] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.374] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x3ea, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x3ea, lpOverlapped=0x0) returned 1 [0224.375] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3f0, lpOverlapped=0x0) returned 1 [0224.376] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.400] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.411] CloseHandle (hObject=0x204) returned 1 [0224.411] CloseHandle (hObject=0x1fc) returned 1 [0224.412] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\683__connections_cellular_kddi corporation (japan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgzX19D3256ZWN01W96c19DZW4sdW42cl9LRERJIENvcnBvcmF01W96IC2KYXB23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgzx19d3256zwn01w96c19dzw4sdw42cl9lrerjienvcnbvcmf01w96ic2kyxb23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0224.413] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjgzX19D3256ZWN01W96c19DZW4sdW42cl9LRERJIENvcnBvcmF01W96IC2KYXB23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njgzx19d3256zwn01w96c19dzw4sdw42cl9lrerjienvcnbvcmf01w96ic2kyxb23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0224.413] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="683__C~1.PRO")) returned 0x7d2998 [0224.413] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="683__C~1.PRO")) returned 0 [0224.413] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0224.413] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\683__connections_cellular_kddi corporation (japan)_i0$(__mvid)@wap.provxml")) returned 1 [0224.414] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\683__Connections_Cellular_KDDI Corporation (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\683__connections_cellular_kddi corporation (japan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0224.414] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="684__C~1.PRO")) returned 1 [0224.415] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\684__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.415] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.416] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1be [0224.416] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.416] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.485] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1be, lpOverlapped=0x0) returned 1 [0224.486] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0224.487] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.511] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.522] CloseHandle (hObject=0x1fc) returned 1 [0224.522] CloseHandle (hObject=0x204) returned 1 [0224.523] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\684__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0224.524] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0224.524] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="684__C~1.PRO")) returned 0x7d2ad8 [0224.524] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1be, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="684__C~1.PRO")) returned 0 [0224.524] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0224.524] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\684__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0224.525] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\684__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\684__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0224.525] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="685__C~1.PRO")) returned 1 [0224.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\685__connections_cellular_bharat sanchar nigam limited (india)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.526] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg1X19D3256ZWN01W96c19DZW4sdW42cl9C1GFyYXQgU2F6Y222ciBO1Wd23SBM1W1pdGV5IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg1x19d3256zwn01w96c19dzw4sdw42cl9c1gfyyxqgu2f6y222cibo1wd23sbm1w1pdgv5ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.526] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0224.526] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.527] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.628] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0224.631] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0224.632] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.655] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.714] CloseHandle (hObject=0x204) returned 1 [0224.714] CloseHandle (hObject=0x1fc) returned 1 [0224.714] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\685__connections_cellular_bharat sanchar nigam limited (india)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg1X19D3256ZWN01W96c19DZW4sdW42cl9C1GFyYXQgU2F6Y222ciBO1Wd23SBM1W1pdGV5IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg1x19d3256zwn01w96c19dzw4sdw42cl9c1gfyyxqgu2f6y222cibo1wd23sbm1w1pdgv5ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0224.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg1X19D3256ZWN01W96c19DZW4sdW42cl9C1GFyYXQgU2F6Y222ciBO1Wd23SBM1W1pdGV5IC2J3mRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg1x19d3256zwn01w96c19dzw4sdw42cl9c1gfyyxqgu2f6y222cibo1wd23sbm1w1pdgv5ic2j3mrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0224.715] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="685__C~1.PRO")) returned 0x7d2918 [0224.715] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918302ce, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918302ce, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918302ce, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="685__C~1.PRO")) returned 0 [0224.715] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0224.716] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\685__connections_cellular_bharat sanchar nigam limited (india)_i0$(__mvid)@wap.provxml")) returned 1 [0224.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\685__Connections_Cellular_Bharat Sanchar Nigam Limited (India)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\685__connections_cellular_bharat sanchar nigam limited (india)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0224.717] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="686__C~1.PRO")) returned 1 [0224.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\686__connections_cellular_t-mobile.pl (poland)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg2X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZS5w3CAoUG9sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg2x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszs5w3caoug9syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.718] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x357 [0224.718] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.718] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.787] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x357, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x357, lpOverlapped=0x0) returned 1 [0224.833] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0224.834] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.858] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.869] CloseHandle (hObject=0x1fc) returned 1 [0224.869] CloseHandle (hObject=0x204) returned 1 [0224.869] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\686__connections_cellular_t-mobile.pl (poland)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg2X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZS5w3CAoUG9sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg2x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszs5w3caoug9syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0224.870] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg2X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZS5w3CAoUG9sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg2x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszs5w3caoug9syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0224.870] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="686__C~1.PRO")) returned 0x7d2a58 [0224.870] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="686__C~1.PRO")) returned 0 [0224.870] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0224.870] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\686__connections_cellular_t-mobile.pl (poland)_i0$(__mvid)@wap.provxml")) returned 1 [0224.871] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\686__Connections_Cellular_T-Mobile.pl (Poland)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\686__connections_cellular_t-mobile.pl (poland)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0224.871] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="687__C~1.PRO")) returned 1 [0224.872] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\687__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.872] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg3X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg3x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.872] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0224.873] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.873] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0224.941] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0224.943] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0224.945] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0224.967] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0224.979] CloseHandle (hObject=0x204) returned 1 [0224.979] CloseHandle (hObject=0x1fc) returned 1 [0224.979] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\687__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg3X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg3x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0224.980] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg3X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg3x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0224.980] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="687__C~1.PRO")) returned 0x7d2ad8 [0224.981] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="687__C~1.PRO")) returned 0 [0224.981] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0224.981] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\687__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0224.982] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\687__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\687__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0224.982] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="688__C~1.PRO")) returned 1 [0224.982] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\688__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0224.982] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg4X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg4x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0224.983] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0224.983] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0224.983] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.048] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0225.050] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0225.051] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.077] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.088] CloseHandle (hObject=0x1fc) returned 1 [0225.088] CloseHandle (hObject=0x204) returned 1 [0225.088] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\688__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg4X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg4x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0225.089] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg4X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg4x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0225.089] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="688__C~1.PRO")) returned 0x7d2ad8 [0225.090] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9185653d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9185653d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9185653d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="688__C~1.PRO")) returned 0 [0225.090] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0225.090] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\688__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml")) returned 1 [0225.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\688__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\688__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0225.091] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="689__C~1.PRO")) returned 1 [0225.091] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\689__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.091] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg5X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg5x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.092] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0225.092] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.092] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.157] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0225.161] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0225.162] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.185] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.207] CloseHandle (hObject=0x204) returned 1 [0225.207] CloseHandle (hObject=0x1fc) returned 1 [0225.207] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\689__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg5X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg5x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0225.208] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Njg5X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njg5x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0225.208] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="689__C~1.PRO")) returned 0x7d3018 [0225.209] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="689__C~1.PRO")) returned 0 [0225.209] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0225.209] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\689__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0225.210] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\689__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\689__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0225.210] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml", cAlternateFileName="68__CO~1.PRO")) returned 1 [0225.210] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\68__connections_cellular_china mobile (china)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.211] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0No1W52IE1vYmlsZSAoQ22p3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj2fx0nv3m5ly3rp325zx0nl3g413gfyx0no1w52ie1vymlszsaoq22p3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.211] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0225.211] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.212] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.299] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0225.301] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0225.302] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.325] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.337] CloseHandle (hObject=0x1fc) returned 1 [0225.337] CloseHandle (hObject=0x204) returned 1 [0225.338] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\68__connections_cellular_china mobile (china)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0No1W52IE1vYmlsZSAoQ22p3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj2fx0nv3m5ly3rp325zx0nl3g413gfyx0no1w52ie1vymlszsaoq22p3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0225.339] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0No1W52IE1vYmlsZSAoQ22p3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj2fx0nv3m5ly3rp325zx0nl3g413gfyx0no1w52ie1vymlszsaoq22p3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0225.339] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml", cAlternateFileName="68__CO~1.PRO")) returned 0x7d3018 [0225.339] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml", cAlternateFileName="68__CO~1.PRO")) returned 0 [0225.339] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0225.339] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\68__connections_cellular_china mobile (china)_i0$(__mvid)@wap.provxml")) returned 1 [0225.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\68__Connections_Cellular_China Mobile (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\68__connections_cellular_china mobile (china)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0225.340] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="690__C~1.PRO")) returned 1 [0225.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\690__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5wX19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5wx19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.342] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0225.342] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.342] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.446] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0225.448] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0225.449] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.475] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.486] CloseHandle (hObject=0x204) returned 1 [0225.486] CloseHandle (hObject=0x1fc) returned 1 [0225.487] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\690__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5wX19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5wx19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0225.488] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5wX19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5wx19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0225.488] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="690__C~1.PRO")) returned 0x7d3018 [0225.488] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="690__C~1.PRO")) returned 0 [0225.488] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0225.488] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\690__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml")) returned 1 [0225.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\690__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\690__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0225.489] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="691__C~1.PRO")) returned 1 [0225.489] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\691__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.490] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj54X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj54x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.490] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ce [0225.490] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.491] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.559] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ce, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ce, lpOverlapped=0x0) returned 1 [0225.560] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0225.561] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.585] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.599] CloseHandle (hObject=0x1fc) returned 1 [0225.599] CloseHandle (hObject=0x204) returned 1 [0225.599] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\691__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj54X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj54x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0225.600] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj54X19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj54x19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0225.600] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="691__C~1.PRO")) returned 0x7d2c18 [0225.600] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="691__C~1.PRO")) returned 0 [0225.600] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0225.600] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\691__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml")) returned 1 [0225.602] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\691__Connections_Cellular_FarEasTone (Taiwan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\691__connections_cellular_fareastone (taiwan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0225.602] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="692__C~1.PRO")) returned 1 [0225.602] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\692__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.603] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5yX19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5yx19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.604] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0225.604] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.604] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.675] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0225.676] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0225.677] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.700] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.711] CloseHandle (hObject=0x204) returned 1 [0225.711] CloseHandle (hObject=0x1fc) returned 1 [0225.711] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\692__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5yX19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5yx19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0225.712] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5yX19D3256ZWN01W96c19DZW4sdW42cl9GYXJFYXNU325lIC2UYWl3YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5yx19d3256zwn01w96c19dzw4sdw42cl9gyxjfyxnu325lic2uywl3yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0225.712] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="692__C~1.PRO")) returned 0x7d3098 [0225.712] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9187c7a9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9187c7a9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9187c7a9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="692__C~1.PRO")) returned 0 [0225.712] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0225.712] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\692__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml")) returned 1 [0225.713] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\692__Connections_Cellular_FarEasTone (Taiwan)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\692__connections_cellular_fareastone (taiwan)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0225.713] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="693__C~1.PRO")) returned 1 [0225.714] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\693__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.714] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5zX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5zx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.714] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0225.714] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.715] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0225.849] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0225.853] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0225.853] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0225.876] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0225.888] CloseHandle (hObject=0x1fc) returned 1 [0225.888] CloseHandle (hObject=0x204) returned 1 [0225.888] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\693__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5zX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5zx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0225.889] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj5zX19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj5zx19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0225.889] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="693__C~1.PRO")) returned 0x7d2ad8 [0225.889] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml", cAlternateFileName="693__C~1.PRO")) returned 0 [0225.889] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0225.889] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\693__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml")) returned 1 [0225.890] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\693__Connections_Cellular_Kyivstar (Ukraine)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\693__connections_cellular_kyivstar (ukraine)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0225.891] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", cAlternateFileName="694__C~1.PRO")) returned 1 [0225.891] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\694__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0225.891] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj50X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj50x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0225.892] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d4 [0225.892] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0225.892] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.107] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d4, lpOverlapped=0x0) returned 1 [0226.108] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0226.109] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.133] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.144] CloseHandle (hObject=0x204) returned 1 [0226.144] CloseHandle (hObject=0x1fc) returned 1 [0226.144] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\694__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj50X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj50x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0226.145] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj50X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj50x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0226.145] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", cAlternateFileName="694__C~1.PRO")) returned 0x7d2cd8 [0226.145] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml", cAlternateFileName="694__C~1.PRO")) returned 0 [0226.145] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0226.145] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\694__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml")) returned 1 [0226.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\694__Connections_Cellular_Kyivstar (Ukraine)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\694__connections_cellular_kyivstar (ukraine)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0226.147] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", cAlternateFileName="695__C~1.PRO")) returned 1 [0226.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\695__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj51X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj51x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.149] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d3 [0226.149] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.150] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.212] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d3, lpOverlapped=0x0) returned 1 [0226.213] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0226.214] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.240] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.251] CloseHandle (hObject=0x1fc) returned 1 [0226.251] CloseHandle (hObject=0x204) returned 1 [0226.251] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\695__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj51X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj51x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0226.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj51X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj51x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0226.252] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", cAlternateFileName="695__C~1.PRO")) returned 0x7d2a18 [0226.252] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml", cAlternateFileName="695__C~1.PRO")) returned 0 [0226.252] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0226.252] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\695__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml")) returned 1 [0226.253] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\695__Connections_Cellular_Kyivstar (Ukraine)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\695__connections_cellular_kyivstar (ukraine)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0226.253] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", cAlternateFileName="696__C~1.PRO")) returned 1 [0226.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\696__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.254] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj52X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj52x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.255] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0226.255] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.255] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.337] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0226.339] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0226.340] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.363] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.374] CloseHandle (hObject=0x204) returned 1 [0226.374] CloseHandle (hObject=0x1fc) returned 1 [0226.374] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\696__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj52X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj52x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0226.375] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj52X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj52x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0226.375] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", cAlternateFileName="696__C~1.PRO")) returned 0x7d2b58 [0226.376] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml", cAlternateFileName="696__C~1.PRO")) returned 0 [0226.376] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0226.376] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\696__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml")) returned 1 [0226.377] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\696__Connections_Cellular_Kyivstar (Ukraine)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\696__connections_cellular_kyivstar (ukraine)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0226.377] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", cAlternateFileName="697__C~1.PRO")) returned 1 [0226.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\697__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj53X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj53x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.378] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0226.378] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.379] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.483] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0226.484] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0226.485] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.531] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.543] CloseHandle (hObject=0x1fc) returned 1 [0226.543] CloseHandle (hObject=0x204) returned 1 [0226.543] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\697__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj53X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj53x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0226.544] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj53X19D3256ZWN01W96c19DZW4sdW42cl9L7Wl2c3R2ciAoVWtyYWl6ZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj53x19d3256zwn01w96c19dzw4sdw42cl9l7wl2c3r2ciaovwtyywl6zslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0226.544] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", cAlternateFileName="697__C~1.PRO")) returned 0x7d2ad8 [0226.544] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918a2a15, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml", cAlternateFileName="697__C~1.PRO")) returned 0 [0226.544] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0226.544] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\697__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml")) returned 1 [0226.545] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\697__Connections_Cellular_Kyivstar (Ukraine)_i4$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\697__connections_cellular_kyivstar (ukraine)_i4$(__mvid)@wap.provxml")) returned 0xffffffff [0226.546] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="698__C~1.PRO")) returned 1 [0226.548] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\698__connections_cellular_3 (austria)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.549] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj54X19D3256ZWN01W96c19DZW4sdW42cl8zIC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj54x19d3256zwn01w96c19dzw4sdw42cl8zic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.549] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bc [0226.549] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.550] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.616] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bc, lpOverlapped=0x0) returned 1 [0226.618] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0226.618] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.643] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.654] CloseHandle (hObject=0x204) returned 1 [0226.654] CloseHandle (hObject=0x1fc) returned 1 [0226.654] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\698__connections_cellular_3 (austria)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj54X19D3256ZWN01W96c19DZW4sdW42cl8zIC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj54x19d3256zwn01w96c19dzw4sdw42cl8zic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0226.655] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj54X19D3256ZWN01W96c19DZW4sdW42cl8zIC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj54x19d3256zwn01w96c19dzw4sdw42cl8zic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0226.655] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="698__C~1.PRO")) returned 0x7d2ad8 [0226.655] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918a2a15, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918a2a15, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="698__C~1.PRO")) returned 0 [0226.655] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0226.655] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\698__connections_cellular_3 (austria)_i0$(__mvid)@wap.provxml")) returned 1 [0226.656] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\698__Connections_Cellular_3 (Austria)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\698__connections_cellular_3 (austria)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0226.656] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="699__C~1.PRO")) returned 1 [0226.657] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\699__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.657] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.657] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c6 [0226.657] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.658] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.733] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c6, lpOverlapped=0x0) returned 1 [0226.740] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0226.741] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.826] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.839] CloseHandle (hObject=0x1fc) returned 1 [0226.839] CloseHandle (hObject=0x204) returned 1 [0226.839] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\699__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0226.840] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0226.840] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="699__C~1.PRO")) returned 0x7d2ad8 [0226.840] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="699__C~1.PRO")) returned 0 [0226.840] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0226.841] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\699__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0226.842] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\699__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\699__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0226.842] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="69__CE~1.PRO")) returned 1 [0226.842] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\69__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.842] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.843] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1db [0226.843] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.844] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0226.919] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1db, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1db, lpOverlapped=0x0) returned 1 [0226.920] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0226.921] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0226.944] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0226.957] CloseHandle (hObject=0x204) returned 1 [0226.957] CloseHandle (hObject=0x1fc) returned 1 [0226.958] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\69__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0 [0226.959] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NjlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\njlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0x20 [0226.959] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="69__CE~1.PRO")) returned 0x7d2c98 [0226.959] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9032cd93, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9032cd93, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9032cd93, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1db, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="69__CE~1.PRO")) returned 0 [0226.959] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0226.959] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\69__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0226.960] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\69__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\69__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0226.960] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="6__CON~1.PRO")) returned 1 [0226.961] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\6__connections_cellular_telefonica (argentina)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0226.961] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nl9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVGVsZWZv3mljYSAoQXJnZW501W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nl9fq2963mvjdglv3nnfq2vs3hvsyxjfvgvszwzv3mljysaoqxjnzw501w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0226.962] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cb [0226.962] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0226.962] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.037] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cb, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cb, lpOverlapped=0x0) returned 1 [0227.075] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0227.076] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0227.101] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.112] CloseHandle (hObject=0x1fc) returned 1 [0227.113] CloseHandle (hObject=0x204) returned 1 [0227.113] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\6__connections_cellular_telefonica (argentina)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nl9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVGVsZWZv3mljYSAoQXJnZW501W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nl9fq2963mvjdglv3nnfq2vs3hvsyxjfvgvszwzv3mljysaoqxjnzw501w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0227.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nl9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVGVsZWZv3mljYSAoQXJnZW501W52KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nl9fq2963mvjdglv3nnfq2vs3hvsyxjfvgvszwzv3mljysaoqxjnzw501w52kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0227.114] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="6__CON~1.PRO")) returned 0x7d3018 [0227.114] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml", cAlternateFileName="6__CON~1.PRO")) returned 0 [0227.114] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0227.114] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\6__connections_cellular_telefonica (argentina)_i0$(__mvid)@wap.provxml")) returned 1 [0227.115] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\6__Connections_Cellular_Telefonica (Argentina)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\6__connections_cellular_telefonica (argentina)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0227.115] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="700__C~1.PRO")) returned 1 [0227.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\700__connections_cellular_3 (indonesia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0227.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzawx19d3256zwn01w96c19dzw4sdw42cl8zic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0227.117] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2be [0227.117] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0227.117] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.321] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2be, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2be, lpOverlapped=0x0) returned 1 [0227.322] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0227.324] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0227.348] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.359] CloseHandle (hObject=0x204) returned 1 [0227.359] CloseHandle (hObject=0x1fc) returned 1 [0227.359] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\700__connections_cellular_3 (indonesia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzawx19d3256zwn01w96c19dzw4sdw42cl8zic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0227.360] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzawx19d3256zwn01w96c19dzw4sdw42cl8zic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0227.360] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="700__C~1.PRO")) returned 0x7d3018 [0227.360] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="700__C~1.PRO")) returned 0 [0227.360] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0227.360] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\700__connections_cellular_3 (indonesia)_i0$(__mvid)@wap.provxml")) returned 1 [0227.361] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\700__Connections_Cellular_3 (Indonesia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\700__connections_cellular_3 (indonesia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0227.362] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="701__C~1.PRO")) returned 1 [0227.362] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\701__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0227.362] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0227.363] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c6 [0227.363] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0227.363] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.430] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c6, lpOverlapped=0x0) returned 1 [0227.432] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0227.433] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0227.456] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.468] CloseHandle (hObject=0x1fc) returned 1 [0227.468] CloseHandle (hObject=0x204) returned 1 [0227.468] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\701__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0227.469] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0227.469] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="701__C~1.PRO")) returned 0x7d2c18 [0227.469] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="701__C~1.PRO")) returned 0 [0227.469] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0227.470] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\701__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0227.510] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\701__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\701__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0227.510] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="702__C~1.PRO")) returned 1 [0227.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\702__connections_cellular_3 (italy)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0227.511] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAyX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzayx19d3256zwn01w96c19dzw4sdw42cl8zic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0227.512] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0227.512] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0227.512] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.579] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0227.580] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0227.581] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0227.605] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.616] CloseHandle (hObject=0x204) returned 1 [0227.616] CloseHandle (hObject=0x1fc) returned 1 [0227.616] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\702__connections_cellular_3 (italy)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAyX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzayx19d3256zwn01w96c19dzw4sdw42cl8zic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0227.617] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAyX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzayx19d3256zwn01w96c19dzw4sdw42cl8zic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0227.617] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="702__C~1.PRO")) returned 0x7d2c98 [0227.617] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918c8c7c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="702__C~1.PRO")) returned 0 [0227.617] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0227.617] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\702__connections_cellular_3 (italy)_i0$(__mvid)@wap.provxml")) returned 1 [0227.618] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\702__Connections_Cellular_3 (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\702__connections_cellular_3 (italy)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0227.618] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="703__C~1.PRO")) returned 1 [0227.619] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\703__connections_cellular_3 (italy)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0227.619] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzazx19d3256zwn01w96c19dzw4sdw42cl8zic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0227.619] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c1 [0227.619] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0227.621] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.687] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c1, lpOverlapped=0x0) returned 1 [0227.688] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0227.689] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0227.714] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.725] CloseHandle (hObject=0x1fc) returned 1 [0227.725] CloseHandle (hObject=0x204) returned 1 [0227.726] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\703__connections_cellular_3 (italy)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzazx19d3256zwn01w96c19dzw4sdw42cl8zic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0227.727] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzazx19d3256zwn01w96c19dzw4sdw42cl8zic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0227.727] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="703__C~1.PRO")) returned 0x7d2a18 [0227.727] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918c8c7c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918c8c7c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="703__C~1.PRO")) returned 0 [0227.727] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0227.727] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\703__connections_cellular_3 (italy)_i1$(__mvid)@wap.provxml")) returned 1 [0227.728] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\703__Connections_Cellular_3 (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\703__connections_cellular_3 (italy)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0227.728] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="704__C~1.PRO")) returned 1 [0227.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\704__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0227.729] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0227.729] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c3 [0227.729] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0227.730] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.857] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c3, lpOverlapped=0x0) returned 1 [0227.858] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0227.859] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0227.883] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0227.899] CloseHandle (hObject=0x204) returned 1 [0227.899] CloseHandle (hObject=0x1fc) returned 1 [0227.900] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\704__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0227.901] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0227.901] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="704__C~1.PRO")) returned 0x7d2c98 [0227.901] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="704__C~1.PRO")) returned 0 [0227.902] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0227.902] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\704__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0227.903] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\704__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\704__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0227.903] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="705__C~1.PRO")) returned 1 [0227.903] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\705__connections_cellular_fastweb (italy)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0227.903] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA1X19D3256ZWN01W96c19DZW4sdW42cl9GQVNUV0VCIC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza1x19d3256zwn01w96c19dzw4sdw42cl9gqvnuv0vcic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0227.904] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0227.904] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0227.904] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0227.981] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0227.984] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0227.985] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.010] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.024] CloseHandle (hObject=0x1fc) returned 1 [0228.024] CloseHandle (hObject=0x204) returned 1 [0228.025] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\705__connections_cellular_fastweb (italy)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA1X19D3256ZWN01W96c19DZW4sdW42cl9GQVNUV0VCIC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza1x19d3256zwn01w96c19dzw4sdw42cl9gqvnuv0vcic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0228.026] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA1X19D3256ZWN01W96c19DZW4sdW42cl9GQVNUV0VCIC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza1x19d3256zwn01w96c19dzw4sdw42cl9gqvnuv0vcic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0228.026] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="705__C~1.PRO")) returned 0x7d3098 [0228.026] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="705__C~1.PRO")) returned 0 [0228.026] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0228.026] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\705__connections_cellular_fastweb (italy)_i0$(__mvid)@wap.provxml")) returned 1 [0228.027] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\705__Connections_Cellular_FASTWEB (Italy)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\705__connections_cellular_fastweb (italy)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0228.027] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="706__C~1.PRO")) returned 1 [0228.027] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\706__connections_cellular_fastweb (italy)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.028] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA2X19D3256ZWN01W96c19DZW4sdW42cl9GQVNUV0VCIC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza2x19d3256zwn01w96c19dzw4sdw42cl9gqvnuv0vcic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.029] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0228.029] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.030] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.097] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0228.099] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0228.100] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.124] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.139] CloseHandle (hObject=0x204) returned 1 [0228.139] CloseHandle (hObject=0x1fc) returned 1 [0228.140] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\706__connections_cellular_fastweb (italy)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA2X19D3256ZWN01W96c19DZW4sdW42cl9GQVNUV0VCIC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza2x19d3256zwn01w96c19dzw4sdw42cl9gqvnuv0vcic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0228.141] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA2X19D3256ZWN01W96c19DZW4sdW42cl9GQVNUV0VCIC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza2x19d3256zwn01w96c19dzw4sdw42cl9gqvnuv0vcic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0228.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="706__C~1.PRO")) returned 0x7d3098 [0228.141] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="706__C~1.PRO")) returned 0 [0228.141] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0228.141] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\706__connections_cellular_fastweb (italy)_i1$(__mvid)@wap.provxml")) returned 1 [0228.143] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\706__Connections_Cellular_FASTWEB (Italy)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\706__connections_cellular_fastweb (italy)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0228.143] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="707__C~1.PRO")) returned 1 [0228.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\707__connections_cellular_transatel (france)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA3X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza3x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.145] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c7 [0228.145] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.146] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.230] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c7, lpOverlapped=0x0) returned 1 [0228.231] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0228.232] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.255] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.267] CloseHandle (hObject=0x1fc) returned 1 [0228.267] CloseHandle (hObject=0x204) returned 1 [0228.267] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\707__connections_cellular_transatel (france)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA3X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza3x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0228.268] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA3X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza3x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0228.268] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="707__C~1.PRO")) returned 0x7d2998 [0228.268] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="707__C~1.PRO")) returned 0 [0228.268] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0228.268] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\707__connections_cellular_transatel (france)_i0$(__mvid)@wap.provxml")) returned 1 [0228.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\707__Connections_Cellular_Transatel (France)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\707__connections_cellular_transatel (france)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0228.275] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="708__C~1.PRO")) returned 1 [0228.275] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\708__connections_cellular_transatel (france)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.275] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA4X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza4x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.276] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0228.276] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.277] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.344] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0228.345] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0228.346] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.390] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.402] CloseHandle (hObject=0x204) returned 1 [0228.402] CloseHandle (hObject=0x1fc) returned 1 [0228.402] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\708__connections_cellular_transatel (france)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA4X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza4x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0228.403] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA4X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza4x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0228.403] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="708__C~1.PRO")) returned 0x7d2ad8 [0228.403] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x918eeee8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x918eeee8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x918eeee8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="708__C~1.PRO")) returned 0 [0228.403] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0228.404] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\708__connections_cellular_transatel (france)_i1$(__mvid)@wap.provxml")) returned 1 [0228.405] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\708__Connections_Cellular_Transatel (France)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\708__connections_cellular_transatel (france)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0228.405] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml", cAlternateFileName="709__C~1.PRO")) returned 1 [0228.405] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\709__connections_cellular_transatel (worldwide)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.406] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA5X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKFdvcm45d2l5ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza5x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkfdvcm45d2l5zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.406] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0228.407] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.407] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.512] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0228.513] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0228.515] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.538] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.552] CloseHandle (hObject=0x1fc) returned 1 [0228.552] CloseHandle (hObject=0x204) returned 1 [0228.552] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\709__connections_cellular_transatel (worldwide)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA5X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKFdvcm45d2l5ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza5x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkfdvcm45d2l5zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0228.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzA5X19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKFdvcm45d2l5ZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nza5x19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgkfdvcm45d2l5zslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0228.553] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml", cAlternateFileName="709__C~1.PRO")) returned 0x7d2a18 [0228.553] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml", cAlternateFileName="709__C~1.PRO")) returned 0 [0228.553] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0228.553] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\709__connections_cellular_transatel (worldwide)_i0$(__mvid)@wap.provxml")) returned 1 [0228.554] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\709__Connections_Cellular_Transatel (Worldwide)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\709__connections_cellular_transatel (worldwide)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0228.554] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml", cAlternateFileName="70__CO~1.PRO")) returned 1 [0228.555] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\70__connections_cellular_china unicom (china)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.556] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0No1W52IFV61WNv3SAoQ22p3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzbfx0nv3m5ly3rp325zx0nl3g413gfyx0no1w52ifv61wnv3saoq22p3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.556] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0228.556] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.557] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.623] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0228.624] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0228.625] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.650] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.662] CloseHandle (hObject=0x204) returned 1 [0228.662] CloseHandle (hObject=0x1fc) returned 1 [0228.662] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\70__connections_cellular_china unicom (china)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0No1W52IFV61WNv3SAoQ22p3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzbfx0nv3m5ly3rp325zx0nl3g413gfyx0no1w52ifv61wnv3saoq22p3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0228.663] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0No1W52IFV61WNv3SAoQ22p3mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzbfx0nv3m5ly3rp325zx0nl3g413gfyx0no1w52ifv61wnv3saoq22p3mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0228.663] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml", cAlternateFileName="70__CO~1.PRO")) returned 0x7d29d8 [0228.663] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml", cAlternateFileName="70__CO~1.PRO")) returned 0 [0228.663] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0228.664] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\70__connections_cellular_china unicom (china)_i0$(__mvid)@wap.provxml")) returned 1 [0228.665] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\70__Connections_Cellular_China Unicom (China)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\70__connections_cellular_china unicom (china)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0228.665] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml", cAlternateFileName="710__C~1.PRO")) returned 1 [0228.665] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\710__connections_cellular_transatel (datamarketplace)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.665] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEwX19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKER2dGFNYXJrZXRw3GFjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzewx19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgker2dgfnyxjrzxrw3gfjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.666] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x309 [0228.666] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.666] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.736] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x309, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x309, lpOverlapped=0x0) returned 1 [0228.739] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0228.740] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.776] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.844] CloseHandle (hObject=0x1fc) returned 1 [0228.844] CloseHandle (hObject=0x204) returned 1 [0228.844] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\710__connections_cellular_transatel (datamarketplace)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEwX19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKER2dGFNYXJrZXRw3GFjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzewx19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgker2dgfnyxjrzxrw3gfjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0228.845] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEwX19D3256ZWN01W96c19DZW4sdW42cl9UcmF6c2F0ZWwgKER2dGFNYXJrZXRw3GFjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzewx19d3256zwn01w96c19dzw4sdw42cl9ucmf6c2f0zwwgker2dgfnyxjrzxrw3gfjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0228.845] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml", cAlternateFileName="710__C~1.PRO")) returned 0x7d2a18 [0228.846] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml", cAlternateFileName="710__C~1.PRO")) returned 0 [0228.846] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0228.846] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\710__connections_cellular_transatel (datamarketplace)_i0$(__mvid)@wap.provxml")) returned 1 [0228.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\710__Connections_Cellular_Transatel (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\710__connections_cellular_transatel (datamarketplace)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0228.847] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", cAlternateFileName="711__D~1.PRO")) returned 1 [0228.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\711__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE4X19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9EYXR2TWFy12V0cG42Y2VS32Ft1W5nVUlF3mFi3GV5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze4x19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9eyxr2twfy12v0cg42y2vs32ft1w5nvulf3mfi3gv5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.848] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c8 [0228.848] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.849] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0228.916] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c8, lpOverlapped=0x0) returned 1 [0228.919] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0228.920] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0228.943] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0228.954] CloseHandle (hObject=0x204) returned 1 [0228.954] CloseHandle (hObject=0x1fc) returned 1 [0228.955] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\711__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE4X19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9EYXR2TWFy12V0cG42Y2VS32Ft1W5nVUlF3mFi3GV5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze4x19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9eyxr2twfy12v0cg42y2vs32ft1w5nvulf3mfi3gv5lnby33z43ww9.0ilfzr")) returned 0 [0228.956] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE4X19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9EYXR2TWFy12V0cG42Y2VS32Ft1W5nVUlF3mFi3GV5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze4x19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9eyxr2twfy12v0cg42y2vs32ft1w5nvulf3mfi3gv5lnby33z43ww9.0ilfzr")) returned 0x20 [0228.956] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", cAlternateFileName="711__D~1.PRO")) returned 0x7d2c98 [0228.956] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", cAlternateFileName="711__D~1.PRO")) returned 0 [0228.956] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0228.956] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\711__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml")) returned 1 [0228.958] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\711__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\711__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml")) returned 0xffffffff [0228.958] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", cAlternateFileName="712__D~1.PRO")) returned 1 [0228.961] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\712__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0228.961] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEyX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9TdXBw33J0RGF0YU12cmtldHBsYWNlLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzeyx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9tdxbw33j0rgf0yu12cmtldhbsywnllnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0228.962] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1bf [0228.962] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0228.962] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.029] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1bf, lpOverlapped=0x0) returned 1 [0229.030] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0229.031] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.058] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.069] CloseHandle (hObject=0x1fc) returned 1 [0229.069] CloseHandle (hObject=0x204) returned 1 [0229.069] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\712__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEyX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9TdXBw33J0RGF0YU12cmtldHBsYWNlLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzeyx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9tdxbw33j0rgf0yu12cmtldhbsywnllnby33z43ww9.0ilfzr")) returned 0 [0229.070] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEyX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9TdXBw33J0RGF0YU12cmtldHBsYWNlLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzeyx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9tdxbw33j0rgf0yu12cmtldhbsywnllnby33z43ww9.0ilfzr")) returned 0x20 [0229.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", cAlternateFileName="712__D~1.PRO")) returned 0x7d3018 [0229.071] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", cAlternateFileName="712__D~1.PRO")) returned 0 [0229.071] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0229.071] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\712__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml")) returned 1 [0229.072] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\712__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\712__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml")) returned 0xffffffff [0229.072] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="713__C~1.PRO")) returned 1 [0229.072] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\713__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEzX19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzezx19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.074] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2bd [0229.074] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.074] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.140] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2bd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2bd, lpOverlapped=0x0) returned 1 [0229.142] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0229.143] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.166] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.178] CloseHandle (hObject=0x204) returned 1 [0229.178] CloseHandle (hObject=0x1fc) returned 1 [0229.179] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\713__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEzX19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzezx19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0229.180] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzEzX19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzezx19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0229.180] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="713__C~1.PRO")) returned 0x7d3018 [0229.180] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91915157, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91915157, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91915157, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="713__C~1.PRO")) returned 0 [0229.180] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0229.180] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\713__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 1 [0229.181] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\713__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\713__connections_cellular_cmhk (hong kong sar)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0229.181] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="714__C~1.PRO")) returned 1 [0229.181] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\714__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.182] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE0X19D3256ZWN01W96c19DZW4sdW42cl9T32Z0QmF61yAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze0x19d3256zwn01w96c19dzw4sdw42cl9t32z0qmf61yaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.182] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x399 [0229.182] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.183] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.272] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x399, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x399, lpOverlapped=0x0) returned 1 [0229.273] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3a0, lpOverlapped=0x0) returned 1 [0229.274] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.297] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.308] CloseHandle (hObject=0x1fc) returned 1 [0229.308] CloseHandle (hObject=0x204) returned 1 [0229.308] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\714__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE0X19D3256ZWN01W96c19DZW4sdW42cl9T32Z0QmF61yAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze0x19d3256zwn01w96c19dzw4sdw42cl9t32z0qmf61yaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0229.309] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE0X19D3256ZWN01W96c19DZW4sdW42cl9T32Z0QmF61yAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze0x19d3256zwn01w96c19dzw4sdw42cl9t32z0qmf61yaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0229.309] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="714__C~1.PRO")) returned 0x7d3018 [0229.309] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="714__C~1.PRO")) returned 0 [0229.309] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0229.309] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\714__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml")) returned 1 [0229.310] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\714__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\714__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0229.311] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="715__C~1.PRO")) returned 1 [0229.311] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\715__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.311] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.312] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c9 [0229.312] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.312] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.379] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c9, lpOverlapped=0x0) returned 1 [0229.380] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0229.381] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.406] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.417] CloseHandle (hObject=0x204) returned 1 [0229.417] CloseHandle (hObject=0x1fc) returned 1 [0229.417] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\715__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0 [0229.418] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0x20 [0229.418] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="715__C~1.PRO")) returned 0x7d2cd8 [0229.419] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="715__C~1.PRO")) returned 0 [0229.419] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0229.419] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\715__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0229.420] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\715__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\715__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0229.420] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="716__C~1.PRO")) returned 1 [0229.420] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\716__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.420] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE2X19D3256ZWN01W96c19DZW4sdW42cl9T32Z0QmF61yAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze2x19d3256zwn01w96c19dzw4sdw42cl9t32z0qmf61yaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.421] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x387 [0229.421] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.421] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.571] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x387, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x387, lpOverlapped=0x0) returned 1 [0229.572] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0229.574] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.597] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.608] CloseHandle (hObject=0x1fc) returned 1 [0229.609] CloseHandle (hObject=0x204) returned 1 [0229.609] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\716__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE2X19D3256ZWN01W96c19DZW4sdW42cl9T32Z0QmF61yAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze2x19d3256zwn01w96c19dzw4sdw42cl9t32z0qmf61yaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0229.610] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE2X19D3256ZWN01W96c19DZW4sdW42cl9T32Z0QmF61yAoSmFwYW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze2x19d3256zwn01w96c19dzw4sdw42cl9t32z0qmf61yaosmfwyw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0229.610] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="716__C~1.PRO")) returned 0x7d3018 [0229.610] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x387, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="716__C~1.PRO")) returned 0 [0229.610] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0229.610] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\716__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml")) returned 1 [0229.611] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\716__Connections_Cellular_SoftBank (Japan)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\716__connections_cellular_softbank (japan)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0229.611] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="717__C~1.PRO")) returned 1 [0229.612] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\717__connections_cellular_northern michigan university (united states)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.612] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE3X19D3256ZWN01W96c19DZW4sdW42cl9O33J01GVy3iBN1WNo1Wd23iBV3ml2ZXJz1XR5IC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze3x19d3256zwn01w96c19dzw4sdw42cl9o33j01gvy3ibn1wno1wd23ibv3ml2zxjz1xr5ic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.613] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d6 [0229.613] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.615] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.680] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d6, lpOverlapped=0x0) returned 1 [0229.682] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0229.683] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.707] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.718] CloseHandle (hObject=0x204) returned 1 [0229.718] CloseHandle (hObject=0x1fc) returned 1 [0229.718] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\717__connections_cellular_northern michigan university (united states)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE3X19D3256ZWN01W96c19DZW4sdW42cl9O33J01GVy3iBN1WNo1Wd23iBV3ml2ZXJz1XR5IC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze3x19d3256zwn01w96c19dzw4sdw42cl9o33j01gvy3ibn1wno1wd23ibv3ml2zxjz1xr5ic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0229.719] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE3X19D3256ZWN01W96c19DZW4sdW42cl9O33J01GVy3iBN1WNo1Wd23iBV3ml2ZXJz1XR5IC2V3ml0ZWQgU3R2dGVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze3x19d3256zwn01w96c19dzw4sdw42cl9o33j01gvy3ibn1wno1wd23ibv3ml2zxjz1xr5ic2v3ml0zwqgu3r2dgvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0229.719] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="717__C~1.PRO")) returned 0x7d3018 [0229.719] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml", cAlternateFileName="717__C~1.PRO")) returned 0 [0229.719] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0229.719] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\717__connections_cellular_northern michigan university (united states)_i0$(__mvid)@wap.provxml")) returned 1 [0229.721] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\717__Connections_Cellular_Northern Michigan University (United States)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\717__connections_cellular_northern michigan university (united states)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0229.721] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="718__C~1.PRO")) returned 1 [0229.721] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\718__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.721] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.722] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ca [0229.722] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.722] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.847] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1ca, lpOverlapped=0x0) returned 1 [0229.848] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0229.849] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.873] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.885] CloseHandle (hObject=0x1fc) returned 1 [0229.885] CloseHandle (hObject=0x204) returned 1 [0229.885] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\718__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0229.886] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0229.886] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="718__C~1.PRO")) returned 0x7d2b18 [0229.887] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9193b3c3, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9193b3c3, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9193b3c3, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="718__C~1.PRO")) returned 0 [0229.887] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0229.887] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\718__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0229.888] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\718__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\718__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0229.888] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="719__C~1.PRO")) returned 1 [0229.888] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\719__connections_cellular_sasktel (canada)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.888] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE5X19D3256ZWN01W96c19DZW4sdW42cl9TYXNrVGVsIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze5x19d3256zwn01w96c19dzw4sdw42cl9tyxnrvgvsic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.889] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c5 [0229.889] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.889] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0229.956] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c5, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c5, lpOverlapped=0x0) returned 1 [0229.958] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0229.960] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0229.983] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0229.995] CloseHandle (hObject=0x204) returned 1 [0229.995] CloseHandle (hObject=0x1fc) returned 1 [0229.995] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\719__connections_cellular_sasktel (canada)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE5X19D3256ZWN01W96c19DZW4sdW42cl9TYXNrVGVsIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze5x19d3256zwn01w96c19dzw4sdw42cl9tyxnrvgvsic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0229.996] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzE5X19D3256ZWN01W96c19DZW4sdW42cl9TYXNrVGVsIC2DYW52ZGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nze5x19d3256zwn01w96c19dzw4sdw42cl9tyxnrvgvsic2dyw52zgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0229.996] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="719__C~1.PRO")) returned 0x7d2b98 [0229.996] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml", cAlternateFileName="719__C~1.PRO")) returned 0 [0229.996] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0229.996] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\719__connections_cellular_sasktel (canada)_i0$(__mvid)@wap.provxml")) returned 1 [0229.997] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\719__Connections_Cellular_SaskTel (Canada)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\719__connections_cellular_sasktel (canada)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0229.997] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="71__CE~1.PRO")) returned 1 [0229.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\71__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0229.998] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzFfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzffx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0229.999] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c8 [0229.999] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0229.999] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0230.075] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c8, lpOverlapped=0x0) returned 1 [0230.076] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0230.077] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0230.110] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.121] CloseHandle (hObject=0x1fc) returned 1 [0230.121] CloseHandle (hObject=0x204) returned 1 [0230.121] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\71__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzFfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzffx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0 [0230.122] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzFfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzffx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0x20 [0230.122] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="71__CE~1.PRO")) returned 0x7d2a18 [0230.123] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="71__CE~1.PRO")) returned 0 [0230.123] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0230.123] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\71__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0230.124] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\71__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\71__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0230.124] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml", cAlternateFileName="720__C~1.PRO")) returned 1 [0230.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\720__connections_cellular_gigsky (datamarketplace)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0230.124] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIwX19D3256ZWN01W96c19DZW4sdW42cl9H1WdT135gKER2dGFNYXJrZXRw3GFjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nziwx19d3256zwn01w96c19dzw4sdw42cl9h1wdt135gker2dgfnyxjrzxrw3gfjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0230.125] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x300 [0230.125] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0230.126] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0230.208] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x300, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0230.210] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0230.211] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0230.234] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.250] CloseHandle (hObject=0x204) returned 1 [0230.250] CloseHandle (hObject=0x1fc) returned 1 [0230.250] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\720__connections_cellular_gigsky (datamarketplace)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIwX19D3256ZWN01W96c19DZW4sdW42cl9H1WdT135gKER2dGFNYXJrZXRw3GFjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nziwx19d3256zwn01w96c19dzw4sdw42cl9h1wdt135gker2dgfnyxjrzxrw3gfjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0230.251] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIwX19D3256ZWN01W96c19DZW4sdW42cl9H1WdT135gKER2dGFNYXJrZXRw3GFjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nziwx19d3256zwn01w96c19dzw4sdw42cl9h1wdt135gker2dgfnyxjrzxrw3gfjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0230.251] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml", cAlternateFileName="720__C~1.PRO")) returned 0x7d2998 [0230.251] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml", cAlternateFileName="720__C~1.PRO")) returned 0 [0230.251] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0230.251] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\720__connections_cellular_gigsky (datamarketplace)_i0$(__mvid)@wap.provxml")) returned 1 [0230.252] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\720__Connections_Cellular_GigSky (DataMarketplace)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\720__connections_cellular_gigsky (datamarketplace)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0230.252] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="721__C~1.PRO")) returned 1 [0230.252] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\721__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0230.253] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzi4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0230.253] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d3 [0230.253] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0230.254] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0230.322] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d3, lpOverlapped=0x0) returned 1 [0230.328] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0230.329] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0230.352] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.369] CloseHandle (hObject=0x1fc) returned 1 [0230.369] CloseHandle (hObject=0x204) returned 1 [0230.369] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\721__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzi4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0 [0230.370] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzi4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0x20 [0230.370] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="721__C~1.PRO")) returned 0x7d2b98 [0230.370] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="721__C~1.PRO")) returned 0 [0230.370] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0230.370] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\721__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0230.371] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\721__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\721__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0230.372] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", cAlternateFileName="722__D~1.PRO")) returned 1 [0230.372] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\722__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0230.372] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIyX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9EYXR2TWFy12V0cG42Y2VS32Ft1W5nVUlF3mFi3GV5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nziyx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9eyxr2twfy12v0cg42y2vs32ft1w5nvulf3mfi3gv5lnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0230.373] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c8 [0230.373] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0230.373] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0230.476] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c8, lpOverlapped=0x0) returned 1 [0230.477] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0230.478] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0230.501] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.513] CloseHandle (hObject=0x204) returned 1 [0230.513] CloseHandle (hObject=0x1fc) returned 1 [0230.513] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\722__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIyX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9EYXR2TWFy12V0cG42Y2VS32Ft1W5nVUlF3mFi3GV5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nziyx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9eyxr2twfy12v0cg42y2vs32ft1w5nvulf3mfi3gv5lnby33z43ww9.0ilfzr")) returned 0 [0230.514] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIyX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9EYXR2TWFy12V0cG42Y2VS32Ft1W5nVUlF3mFi3GV5LnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nziyx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9eyxr2twfy12v0cg42y2vs32ft1w5nvulf3mfi3gv5lnby33z43ww9.0ilfzr")) returned 0x20 [0230.514] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", cAlternateFileName="722__D~1.PRO")) returned 0x7d2b58 [0230.514] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x7c8770, dwReserved1=0x7e4358, cFileName="722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml", cAlternateFileName="722__D~1.PRO")) returned 0 [0230.514] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0230.514] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\722__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml")) returned 1 [0230.516] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\722__DataMarketplace_PerSimSettings_$(__ICCID)_DataMarketplaceRoamingUIEnabled.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\722__datamarketplace_persimsettings_$(__iccid)_datamarketplaceroaminguienabled.provxml")) returned 0xffffffff [0230.516] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", cAlternateFileName="723__D~1.PRO")) returned 1 [0230.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\723__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0230.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIzX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9TdXBw33J0RGF0YU12cmtldHBsYWNlLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzizx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9tdxbw33j0rgf0yu12cmtldhbsywnllnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0230.517] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1bf [0230.517] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0230.518] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0230.588] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1bf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1bf, lpOverlapped=0x0) returned 1 [0230.589] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0230.590] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0230.624] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.635] CloseHandle (hObject=0x1fc) returned 1 [0230.636] CloseHandle (hObject=0x204) returned 1 [0230.636] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\723__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIzX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9TdXBw33J0RGF0YU12cmtldHBsYWNlLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzizx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9tdxbw33j0rgf0yu12cmtldhbsywnllnby33z43ww9.0ilfzr")) returned 0 [0230.637] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzIzX19EYXR2TWFy12V0cG42Y2VfUGVyU2ltU2V0dGl6Z3NfJC2fX0lDQ0lEKV9TdXBw33J0RGF0YU12cmtldHBsYWNlLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzizx19eyxr2twfy12v0cg42y2vfugvyu2ltu2v0dgl6z3nfjc2fx0ldq0lekv9tdxbw33j0rgf0yu12cmtldhbsywnllnby33z43ww9.0ilfzr")) returned 0x20 [0230.637] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", cAlternateFileName="723__D~1.PRO")) returned 0x7d3018 [0230.637] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91961627, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x91961627, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x91961627, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1bf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml", cAlternateFileName="723__D~1.PRO")) returned 0 [0230.637] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0230.637] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\723__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml")) returned 1 [0230.638] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\723__DataMarketplace_PerSimSettings_$(__ICCID)_SupportDataMarketplace.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\723__datamarketplace_persimsettings_$(__iccid)_supportdatamarketplace.provxml")) returned 0xffffffff [0230.638] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x316, dwReserved0=0x0, dwReserved1=0x0, cFileName="72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="72__CO~1.PRO")) returned 1 [0230.639] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\72__connections_cellular_claro (colombia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0230.639] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NsYXJvIC2D324v3WJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzjfx0nv3m5ly3rp325zx0nl3g413gfyx0nsyxjvic2d324v3wjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0230.640] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x316 [0230.640] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0230.641] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0230.707] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x316, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x316, lpOverlapped=0x0) returned 1 [0230.708] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0230.709] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0230.733] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0230.744] CloseHandle (hObject=0x204) returned 1 [0230.744] CloseHandle (hObject=0x1fc) returned 1 [0230.745] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\72__connections_cellular_claro (colombia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NsYXJvIC2D324v3WJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzjfx0nv3m5ly3rp325zx0nl3g413gfyx0nsyxjvic2d324v3wjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0230.746] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0NsYXJvIC2D324v3WJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzjfx0nv3m5ly3rp325zx0nl3g413gfyx0nsyxjvic2d324v3wjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0230.746] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x316, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="72__CO~1.PRO")) returned 0x7d3018 [0230.746] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x316, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="72__CO~1.PRO")) returned 0 [0230.746] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0230.746] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\72__connections_cellular_claro (colombia)_i0$(__mvid)@wap.provxml")) returned 1 [0230.747] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\72__Connections_Cellular_Claro (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\72__connections_cellular_claro (colombia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0230.747] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="73__CO~1.PRO")) returned 1 [0230.747] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\73__connections_cellular_telefonica (colombia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0230.748] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GVm325pY2EgKENv3G9tYml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nznfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gvm325py2egkenv3g9tyml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0230.748] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2da [0230.748] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0230.749] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0231.330] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2da, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2da, lpOverlapped=0x0) returned 1 [0231.404] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0231.406] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0231.429] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.440] CloseHandle (hObject=0x1fc) returned 1 [0231.440] CloseHandle (hObject=0x204) returned 1 [0231.440] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\73__connections_cellular_telefonica (colombia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GVm325pY2EgKENv3G9tYml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nznfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gvm325py2egkenv3g9tyml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0231.441] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GVm325pY2EgKENv3G9tYml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nznfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gvm325py2egkenv3g9tyml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0231.441] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="73__CO~1.PRO")) returned 0x7d2ad8 [0231.444] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="73__CO~1.PRO")) returned 0 [0231.444] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0231.444] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\73__connections_cellular_telefonica (colombia)_i0$(__mvid)@wap.provxml")) returned 1 [0231.445] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\73__Connections_Cellular_Telefonica (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\73__connections_cellular_telefonica (colombia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0231.445] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="74__CE~1.PRO")) returned 1 [0231.445] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\74__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0231.446] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0231.446] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e2 [0231.446] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0231.447] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0231.513] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e2, lpOverlapped=0x0) returned 1 [0231.514] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0231.515] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0231.540] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.552] CloseHandle (hObject=0x204) returned 1 [0231.553] CloseHandle (hObject=0x1fc) returned 1 [0231.553] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\74__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0231.554] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0231.554] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="74__CE~1.PRO")) returned 0x7d3098 [0231.554] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90353002, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90353002, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90353002, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="74__CE~1.PRO")) returned 0 [0231.554] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0231.554] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\74__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0231.555] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\74__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\74__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0231.555] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="75__CO~1.PRO")) returned 1 [0231.556] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\75__connections_cellular_tigo (colombia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0231.556] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1RJR08gKENv3G9tYml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzvfx0nv3m5ly3rp325zx0nl3g413gfyx1rjr08gkenv3g9tyml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0231.556] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x291 [0231.556] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0231.557] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0231.623] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x291, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x291, lpOverlapped=0x0) returned 1 [0231.624] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0231.625] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0231.648] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.659] CloseHandle (hObject=0x1fc) returned 1 [0231.659] CloseHandle (hObject=0x204) returned 1 [0231.660] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\75__connections_cellular_tigo (colombia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1RJR08gKENv3G9tYml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzvfx0nv3m5ly3rp325zx0nl3g413gfyx1rjr08gkenv3g9tyml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0231.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1RJR08gKENv3G9tYml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzvfx0nv3m5ly3rp325zx0nl3g413gfyx1rjr08gkenv3g9tyml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0231.662] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="75__CO~1.PRO")) returned 0x7d3018 [0231.662] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="75__CO~1.PRO")) returned 0 [0231.662] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0231.662] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\75__connections_cellular_tigo (colombia)_i0$(__mvid)@wap.provxml")) returned 1 [0231.663] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\75__Connections_Cellular_TIGO (Colombia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\75__connections_cellular_tigo (colombia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0231.663] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml", cAlternateFileName="76__CO~1.PRO")) returned 1 [0231.666] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\76__connections_cellular_vodacom congo (congo (drc))_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0231.666] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFj320gQ296Z28gKENv3mdvIC2EU5MpKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzzfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfj320gq296z28gkenv3mdvic2eu5mpkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0231.667] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0231.667] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0231.667] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0231.769] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0231.780] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0231.781] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0231.804] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.845] CloseHandle (hObject=0x204) returned 1 [0231.845] CloseHandle (hObject=0x1fc) returned 1 [0231.846] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\76__connections_cellular_vodacom congo (congo (drc))_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFj320gQ296Z28gKENv3mdvIC2EU5MpKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzzfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfj320gq296z28gkenv3mdvic2eu5mpkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0231.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFj320gQ296Z28gKENv3mdvIC2EU5MpKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzzfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfj320gq296z28gkenv3mdvic2eu5mpkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0231.847] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml", cAlternateFileName="76__CO~1.PRO")) returned 0x7d29d8 [0231.847] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml", cAlternateFileName="76__CO~1.PRO")) returned 0 [0231.847] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0231.847] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\76__connections_cellular_vodacom congo (congo (drc))_i0$(__mvid)@wap.provxml")) returned 1 [0231.848] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\76__Connections_Cellular_Vodacom Congo (Congo (DRC))_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\76__connections_cellular_vodacom congo (congo (drc))_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0231.848] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="77__CO~1.PRO")) returned 1 [0231.849] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\77__connections_cellular_ice celular (costa rica)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0231.849] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0ljZSBDZW413GFyIC2D33N0YSBS1WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzdfx0nv3m5ly3rp325zx0nl3g413gfyx0ljzsbdzw413gfyic2d33n0ysbs1wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0231.850] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28c [0231.850] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0231.850] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0231.917] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28c, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28c, lpOverlapped=0x0) returned 1 [0231.918] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0231.919] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0231.943] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0231.954] CloseHandle (hObject=0x1fc) returned 1 [0231.954] CloseHandle (hObject=0x204) returned 1 [0231.954] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\77__connections_cellular_ice celular (costa rica)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0ljZSBDZW413GFyIC2D33N0YSBS1WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzdfx0nv3m5ly3rp325zx0nl3g413gfyx0ljzsbdzw413gfyic2d33n0ysbs1wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0231.955] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0ljZSBDZW413GFyIC2D33N0YSBS1WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzdfx0nv3m5ly3rp325zx0nl3g413gfyx0ljzsbdzw413gfyic2d33n0ysbs1wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0231.955] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="77__CO~1.PRO")) returned 0x7d2ad8 [0231.956] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="77__CO~1.PRO")) returned 0 [0231.956] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0231.956] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\77__connections_cellular_ice celular (costa rica)_i0$(__mvid)@wap.provxml")) returned 1 [0231.957] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\77__Connections_Cellular_Ice Celular (Costa Rica)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\77__connections_cellular_ice celular (costa rica)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0231.957] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="78__CO~1.PRO")) returned 1 [0231.957] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\78__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0231.958] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2Dcm92dGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nz2fx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2dcm92dgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0231.958] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0231.958] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0231.959] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.156] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0232.157] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0232.158] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.182] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.193] CloseHandle (hObject=0x204) returned 1 [0232.193] CloseHandle (hObject=0x1fc) returned 1 [0232.193] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\78__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2Dcm92dGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nz2fx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2dcm92dgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0232.194] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Nz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2Dcm92dGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nz2fx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2dcm92dgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0232.194] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="78__CO~1.PRO")) returned 0x7d2ad8 [0232.195] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9037926e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9037926e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9037926e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="78__CO~1.PRO")) returned 0 [0232.195] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0232.195] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\78__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml")) returned 1 [0232.196] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\78__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\78__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0232.196] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="79__CO~1.PRO")) returned 1 [0232.196] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\79__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.197] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2Dcm92dGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2dcm92dgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.198] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x286 [0232.198] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.198] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.264] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x286, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x286, lpOverlapped=0x0) returned 1 [0232.267] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0232.268] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.291] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.302] CloseHandle (hObject=0x1fc) returned 1 [0232.302] CloseHandle (hObject=0x204) returned 1 [0232.303] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\79__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2Dcm92dGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2dcm92dgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0232.304] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\NzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GUyIC2Dcm92dGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\nzlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3guyic2dcm92dgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0232.304] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="79__CO~1.PRO")) returned 0x7d3018 [0232.304] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="79__CO~1.PRO")) returned 0 [0232.304] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0232.304] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\79__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml")) returned 1 [0232.307] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\79__Connections_Cellular_Tele2 (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\79__connections_cellular_tele2 (croatia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0232.307] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="7__CON~1.PRO")) returned 1 [0232.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\7__connections_cellular_hutchison - 3 (australia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.307] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\N19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfSHV0Y22pc296IC0gMyAoQXVzdHJ23Gl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\n19fq2963mvjdglv3nnfq2vs3hvsyxjfshv0y22pc296ic0gmyaoqxvzdhj23gl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.308] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d7 [0232.308] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.308] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.417] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d7, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d7, lpOverlapped=0x0) returned 1 [0232.419] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0232.420] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.443] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.454] CloseHandle (hObject=0x204) returned 1 [0232.454] CloseHandle (hObject=0x1fc) returned 1 [0232.454] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\7__connections_cellular_hutchison - 3 (australia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\N19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfSHV0Y22pc296IC0gMyAoQXVzdHJ23Gl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\n19fq2963mvjdglv3nnfq2vs3hvsyxjfshv0y22pc296ic0gmyaoqxvzdhj23gl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0232.455] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\N19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfSHV0Y22pc296IC0gMyAoQXVzdHJ23Gl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\n19fq2963mvjdglv3nnfq2vs3hvsyxjfshv0y22pc296ic0gmyaoqxvzdhj23gl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0232.456] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="7__CON~1.PRO")) returned 0x7d29d8 [0232.456] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900f0949, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900f0949, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900f0949, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="7__CON~1.PRO")) returned 0 [0232.456] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0232.456] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\7__connections_cellular_hutchison - 3 (australia)_i0$(__mvid)@wap.provxml")) returned 1 [0232.457] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\7__Connections_Cellular_Hutchison - 3 (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\7__connections_cellular_hutchison - 3 (australia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0232.457] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="80__CO~1.PRO")) returned 1 [0232.457] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\80__connections_cellular_hrvatski telekom (croatia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.457] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX02ydmF0c2tpIFRl3GVr320gKENy32F01WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odbfx0nv3m5ly3rp325zx0nl3g413gfyx02ydmf0c2tpifrl3gvr320gkeny32f01wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.458] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d1 [0232.458] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.459] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.526] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d1, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d1, lpOverlapped=0x0) returned 1 [0232.528] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0232.529] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.553] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.564] CloseHandle (hObject=0x1fc) returned 1 [0232.564] CloseHandle (hObject=0x204) returned 1 [0232.564] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\80__connections_cellular_hrvatski telekom (croatia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX02ydmF0c2tpIFRl3GVr320gKENy32F01WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odbfx0nv3m5ly3rp325zx0nl3g413gfyx02ydmf0c2tpifrl3gvr320gkeny32f01wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0232.565] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX02ydmF0c2tpIFRl3GVr320gKENy32F01WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odbfx0nv3m5ly3rp325zx0nl3g413gfyx02ydmf0c2tpifrl3gvr320gkeny32f01wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0232.565] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="80__CO~1.PRO")) returned 0x7d3098 [0232.565] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="80__CO~1.PRO")) returned 0 [0232.565] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0232.565] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\80__connections_cellular_hrvatski telekom (croatia)_i0$(__mvid)@wap.provxml")) returned 1 [0232.567] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\80__Connections_Cellular_Hrvatski Telekom (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\80__connections_cellular_hrvatski telekom (croatia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0232.567] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="81__CO~1.PRO")) returned 1 [0232.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\81__connections_cellular_vipnet (croatia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZpcG5ldCAoQ3JvYXRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odffx0nv3m5ly3rp325zx0nl3g413gfyx1zpcg5ldcaoq3jvyxrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.568] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c2 [0232.568] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.568] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.636] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c2, lpOverlapped=0x0) returned 1 [0232.637] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0232.638] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.663] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.674] CloseHandle (hObject=0x204) returned 1 [0232.674] CloseHandle (hObject=0x1fc) returned 1 [0232.675] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\81__connections_cellular_vipnet (croatia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZpcG5ldCAoQ3JvYXRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odffx0nv3m5ly3rp325zx0nl3g413gfyx1zpcg5ldcaoq3jvyxrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0232.676] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZpcG5ldCAoQ3JvYXRpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odffx0nv3m5ly3rp325zx0nl3g413gfyx1zpcg5ldcaoq3jvyxrpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0232.676] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="81__CO~1.PRO")) returned 0x7d2ad8 [0232.676] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="81__CO~1.PRO")) returned 0 [0232.676] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0232.676] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\81__connections_cellular_vipnet (croatia)_i0$(__mvid)@wap.provxml")) returned 1 [0232.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\81__Connections_Cellular_Vipnet (Croatia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\81__connections_cellular_vipnet (croatia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0232.677] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="82__CE~1.PRO")) returned 1 [0232.677] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\82__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.678] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODJfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odjfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.678] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0232.678] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.679] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.787] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0232.788] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0232.789] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.837] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.848] CloseHandle (hObject=0x1fc) returned 1 [0232.848] CloseHandle (hObject=0x204) returned 1 [0232.848] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\82__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODJfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odjfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0232.849] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODJfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odjfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0232.849] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="82__CE~1.PRO")) returned 0x7d2ad8 [0232.849] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="82__CE~1.PRO")) returned 0 [0232.849] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0232.849] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\82__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0232.850] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\82__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\82__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0232.851] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="83__CO~1.PRO")) returned 1 [0232.851] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\83__connections_cellular_areeba ltd (cyprus)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.851] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0FyZWViYSBMVEQgKEN5cHJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odnfx0nv3m5ly3rp325zx0nl3g413gfyx0fyzwviysbmveqgken5chj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.853] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0232.853] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.853] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0232.921] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0232.922] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0232.923] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0232.948] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0232.959] CloseHandle (hObject=0x204) returned 1 [0232.959] CloseHandle (hObject=0x1fc) returned 1 [0232.959] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\83__connections_cellular_areeba ltd (cyprus)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0FyZWViYSBMVEQgKEN5cHJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odnfx0nv3m5ly3rp325zx0nl3g413gfyx0fyzwviysbmveqgken5chj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0232.960] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0FyZWViYSBMVEQgKEN5cHJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odnfx0nv3m5ly3rp325zx0nl3g413gfyx0fyzwviysbmveqgken5chj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0232.960] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="83__CO~1.PRO")) returned 0x7d3018 [0232.961] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9039f4d9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9039f4d9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9039f4d9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="83__CO~1.PRO")) returned 0 [0232.961] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0232.961] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\83__connections_cellular_areeba ltd (cyprus)_i0$(__mvid)@wap.provxml")) returned 1 [0232.962] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\83__Connections_Cellular_Areeba LTD (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\83__connections_cellular_areeba ltd (cyprus)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0232.962] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="84__CO~1.PRO")) returned 1 [0232.963] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\84__connections_cellular_cytamobile-vodafone (cyprus)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0232.963] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0N5dGFt32Jp3GUtVm95YWZv3mUgKEN5cHJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odrfx0nv3m5ly3rp325zx0nl3g413gfyx0n5dgft32jp3gutvm95ywzv3mugken5chj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0232.964] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0232.964] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0232.964] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.034] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0233.037] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0233.038] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.061] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.074] CloseHandle (hObject=0x1fc) returned 1 [0233.074] CloseHandle (hObject=0x204) returned 1 [0233.074] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\84__connections_cellular_cytamobile-vodafone (cyprus)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0N5dGFt32Jp3GUtVm95YWZv3mUgKEN5cHJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odrfx0nv3m5ly3rp325zx0nl3g413gfyx0n5dgft32jp3gutvm95ywzv3mugken5chj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0233.075] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0N5dGFt32Jp3GUtVm95YWZv3mUgKEN5cHJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odrfx0nv3m5ly3rp325zx0nl3g413gfyx0n5dgft32jp3gutvm95ywzv3mugken5chj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0233.075] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="84__CO~1.PRO")) returned 0x7d29d8 [0233.076] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml", cAlternateFileName="84__CO~1.PRO")) returned 0 [0233.076] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0233.076] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\84__connections_cellular_cytamobile-vodafone (cyprus)_i0$(__mvid)@wap.provxml")) returned 1 [0233.077] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\84__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\84__connections_cellular_cytamobile-vodafone (cyprus)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0233.077] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml", cAlternateFileName="85__CO~1.PRO")) returned 1 [0233.077] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\85__connections_cellular_cytamobile-vodafone (cyprus)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.077] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0N5dGFt32Jp3GUtVm95YWZv3mUgKEN5cHJ1cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odvfx0nv3m5ly3rp325zx0nl3g413gfyx0n5dgft32jp3gutvm95ywzv3mugken5chj1cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.078] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0233.078] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.078] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.145] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0233.147] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0233.148] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.173] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.184] CloseHandle (hObject=0x204) returned 1 [0233.184] CloseHandle (hObject=0x1fc) returned 1 [0233.184] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\85__connections_cellular_cytamobile-vodafone (cyprus)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0N5dGFt32Jp3GUtVm95YWZv3mUgKEN5cHJ1cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odvfx0nv3m5ly3rp325zx0nl3g413gfyx0n5dgft32jp3gutvm95ywzv3mugken5chj1cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0233.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0N5dGFt32Jp3GUtVm95YWZv3mUgKEN5cHJ1cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odvfx0nv3m5ly3rp325zx0nl3g413gfyx0n5dgft32jp3gutvm95ywzv3mugken5chj1cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0233.185] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml", cAlternateFileName="85__CO~1.PRO")) returned 0x7d3018 [0233.185] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml", cAlternateFileName="85__CO~1.PRO")) returned 0 [0233.185] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0233.185] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\85__connections_cellular_cytamobile-vodafone (cyprus)_i1$(__mvid)@wap.provxml")) returned 1 [0233.186] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\85__Connections_Cellular_Cytamobile-Vodafone (Cyprus)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\85__connections_cellular_cytamobile-vodafone (cyprus)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0233.186] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="86__CE~1.PRO")) returned 1 [0233.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\86__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.187] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODZfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odzfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.188] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0233.188] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.188] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.277] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0233.278] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0233.279] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.302] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.313] CloseHandle (hObject=0x1fc) returned 1 [0233.313] CloseHandle (hObject=0x204) returned 1 [0233.314] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\86__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODZfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odzfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0233.315] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODZfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odzfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0233.315] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="86__CE~1.PRO")) returned 0x7d3018 [0233.315] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="86__CE~1.PRO")) returned 0 [0233.315] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0233.315] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\86__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0233.316] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\86__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\86__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0233.316] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="87__CO~1.PRO")) returned 1 [0233.316] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\87__connections_cellular_o2 (czech republic)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.317] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX08yIC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\oddfx0nv3m5ly3rp325zx0nl3g413gfyx08yic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.317] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c8 [0233.317] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.318] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.385] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c8, lpOverlapped=0x0) returned 1 [0233.387] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0233.388] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.410] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.422] CloseHandle (hObject=0x204) returned 1 [0233.422] CloseHandle (hObject=0x1fc) returned 1 [0233.422] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\87__connections_cellular_o2 (czech republic)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX08yIC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\oddfx0nv3m5ly3rp325zx0nl3g413gfyx08yic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0233.423] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX08yIC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\oddfx0nv3m5ly3rp325zx0nl3g413gfyx08yic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0233.423] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="87__CO~1.PRO")) returned 0x7d3018 [0233.423] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903c5745, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903c5745, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903c5745, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="87__CO~1.PRO")) returned 0 [0233.423] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0233.423] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\87__connections_cellular_o2 (czech republic)_i0$(__mvid)@wap.provxml")) returned 1 [0233.424] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\87__Connections_Cellular_O2 (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\87__connections_cellular_o2 (czech republic)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0233.425] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="88__CO~1.PRO")) returned 1 [0233.425] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\88__connections_cellular_t-mobile czech republic (czech republic)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.425] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OD2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEN6ZWNoIFJlcHVi3GljIC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\od2fx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lien6zwnoifjlchvi3gljic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.426] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ee [0233.426] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.426] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.529] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ee, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ee, lpOverlapped=0x0) returned 1 [0233.531] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0233.532] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.557] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.569] CloseHandle (hObject=0x1fc) returned 1 [0233.569] CloseHandle (hObject=0x204) returned 1 [0233.569] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\88__connections_cellular_t-mobile czech republic (czech republic)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OD2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEN6ZWNoIFJlcHVi3GljIC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\od2fx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lien6zwnoifjlchvi3gljic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0233.572] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OD2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEN6ZWNoIFJlcHVi3GljIC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\od2fx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lien6zwnoifjlchvi3gljic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0233.572] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="88__CO~1.PRO")) returned 0x7d2998 [0233.572] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="88__CO~1.PRO")) returned 0 [0233.572] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0233.572] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\88__connections_cellular_t-mobile czech republic (czech republic)_i0$(__mvid)@wap.provxml")) returned 1 [0233.574] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\88__Connections_Cellular_T-Mobile Czech Republic (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\88__connections_cellular_t-mobile czech republic (czech republic)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0233.574] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7cb078, dwReserved1=0x0, cFileName="89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="89__CO~1.PRO")) returned 1 [0233.574] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\89__connections_cellular_vodafone cz (czech republic)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.574] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEN1IC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odlfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325lien1ic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.575] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0233.575] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.575] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.647] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0233.651] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0233.652] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.676] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.687] CloseHandle (hObject=0x204) returned 1 [0233.687] CloseHandle (hObject=0x1fc) returned 1 [0233.688] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\89__connections_cellular_vodafone cz (czech republic)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEN1IC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odlfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325lien1ic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0233.689] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\ODlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEN1IC2D7mVj1CBSZXB1Ym4pYylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\odlfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325lien1ic2d7mvj1cbszxb1ym4pyylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0233.689] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="89__CO~1.PRO")) returned 0x7d2a18 [0233.689] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="89__CO~1.PRO")) returned 0 [0233.689] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0233.689] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\89__connections_cellular_vodafone cz (czech republic)_i0$(__mvid)@wap.provxml")) returned 1 [0233.690] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\89__Connections_Cellular_Vodafone CZ (Czech Republic)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\89__connections_cellular_vodafone cz (czech republic)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0233.690] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="8__CON~1.PRO")) returned 1 [0233.691] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\8__connections_cellular_hutchison - 3 (australia)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.691] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfSHV0Y22pc296IC0gMyAoQXVzdHJ23Gl2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\of9fq2963mvjdglv3nnfq2vs3hvsyxjfshv0y22pc296ic0gmyaoqxvzdhj23gl2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.692] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0233.692] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.693] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.759] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cf, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cf, lpOverlapped=0x0) returned 1 [0233.761] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0233.762] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.794] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.806] CloseHandle (hObject=0x1fc) returned 1 [0233.806] CloseHandle (hObject=0x204) returned 1 [0233.807] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\8__connections_cellular_hutchison - 3 (australia)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfSHV0Y22pc296IC0gMyAoQXVzdHJ23Gl2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\of9fq2963mvjdglv3nnfq2vs3hvsyxjfshv0y22pc296ic0gmyaoqxvzdhj23gl2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0233.808] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfSHV0Y22pc296IC0gMyAoQXVzdHJ23Gl2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\of9fq2963mvjdglv3nnfq2vs3hvsyxjfshv0y22pc296ic0gmyaoqxvzdhj23gl2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0233.808] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="8__CON~1.PRO")) returned 0x7d3098 [0233.808] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="8__CON~1.PRO")) returned 0 [0233.808] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0233.808] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\8__connections_cellular_hutchison - 3 (australia)_i1$(__mvid)@wap.provxml")) returned 1 [0233.809] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\8__Connections_Cellular_Hutchison - 3 (Australia)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\8__connections_cellular_hutchison - 3 (australia)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0233.809] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="90__CO~1.PRO")) returned 1 [0233.809] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\90__connections_cellular_3 (denmark)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otbfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.810] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cd [0233.810] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.811] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0233.936] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cd, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cd, lpOverlapped=0x0) returned 1 [0233.938] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0233.939] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0233.962] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0233.973] CloseHandle (hObject=0x204) returned 1 [0233.973] CloseHandle (hObject=0x1fc) returned 1 [0233.973] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\90__connections_cellular_3 (denmark)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otbfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0233.974] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otbfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0233.974] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="90__CO~1.PRO")) returned 0x7d2b58 [0233.974] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x903eb9ac, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="90__CO~1.PRO")) returned 0 [0233.975] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0233.975] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\90__connections_cellular_3 (denmark)_i0$(__mvid)@wap.provxml")) returned 1 [0233.976] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\90__Connections_Cellular_3 (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\90__connections_cellular_3 (denmark)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0233.976] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml", cAlternateFileName="91__CO~1.PRO")) returned 1 [0233.978] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\91__connections_cellular_3 (denmark)_i1$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0233.978] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otffx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0233.979] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c6 [0233.979] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0233.979] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.049] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c6, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c6, lpOverlapped=0x0) returned 1 [0234.050] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0234.052] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.078] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.089] CloseHandle (hObject=0x1fc) returned 1 [0234.090] CloseHandle (hObject=0x204) returned 1 [0234.090] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\91__connections_cellular_3 (denmark)_i1$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otffx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0234.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otffx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0234.091] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml", cAlternateFileName="91__CO~1.PRO")) returned 0x7d2918 [0234.091] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x903eb9ac, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x903eb9ac, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml", cAlternateFileName="91__CO~1.PRO")) returned 0 [0234.091] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0234.091] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\91__connections_cellular_3 (denmark)_i1$(__mvid)@wap.provxml")) returned 1 [0234.092] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\91__Connections_Cellular_3 (Denmark)_i1$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\91__connections_cellular_3 (denmark)_i1$(__mvid)@wap.provxml")) returned 0xffffffff [0234.092] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml", cAlternateFileName="92__CO~1.PRO")) returned 1 [0234.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\92__connections_cellular_3 (denmark)_i2$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otjfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.094] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cc [0234.094] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.094] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.174] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2cc, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2cc, lpOverlapped=0x0) returned 1 [0234.176] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0234.177] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.203] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.216] CloseHandle (hObject=0x204) returned 1 [0234.216] CloseHandle (hObject=0x1fc) returned 1 [0234.216] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\92__connections_cellular_3 (denmark)_i2$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otjfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0234.217] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otjfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0234.217] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml", cAlternateFileName="92__CO~1.PRO")) returned 0x7d2a18 [0234.218] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml", cAlternateFileName="92__CO~1.PRO")) returned 0 [0234.218] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0234.218] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\92__connections_cellular_3 (denmark)_i2$(__mvid)@wap.provxml")) returned 1 [0234.219] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\92__Connections_Cellular_3 (Denmark)_i2$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\92__connections_cellular_3 (denmark)_i2$(__mvid)@wap.provxml")) returned 0xffffffff [0234.219] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml", cAlternateFileName="93__CO~1.PRO")) returned 1 [0234.219] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\93__connections_cellular_3 (denmark)_i3$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.220] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otnfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.220] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c4 [0234.220] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.221] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.304] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c4, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c4, lpOverlapped=0x0) returned 1 [0234.306] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0234.307] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.330] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.341] CloseHandle (hObject=0x1fc) returned 1 [0234.341] CloseHandle (hObject=0x204) returned 1 [0234.341] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\93__connections_cellular_3 (denmark)_i3$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otnfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0 [0234.342] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyXzMgKERl3m12cmspX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otnfx0nv3m5ly3rp325zx0nl3g413gfyxzmgkerl3m12cmspx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0x20 [0234.342] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml", cAlternateFileName="93__CO~1.PRO")) returned 0x7d2ad8 [0234.342] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml", cAlternateFileName="93__CO~1.PRO")) returned 0 [0234.342] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0234.342] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\93__connections_cellular_3 (denmark)_i3$(__mvid)@wap.provxml")) returned 1 [0234.343] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\93__Connections_Cellular_3 (Denmark)_i3$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\93__connections_cellular_3 (denmark)_i3$(__mvid)@wap.provxml")) returned 0xffffffff [0234.343] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x7c4dc0, dwReserved1=0x0, cFileName="94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="94__CE~1.PRO")) returned 1 [0234.344] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\94__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.344] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.345] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c3 [0234.345] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.345] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.455] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c3, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c3, lpOverlapped=0x0) returned 1 [0234.456] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0234.457] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.480] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.491] CloseHandle (hObject=0x204) returned 1 [0234.491] CloseHandle (hObject=0x1fc) returned 1 [0234.491] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\94__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0 [0234.493] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0x20 [0234.493] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="94__CE~1.PRO")) returned 0x7d3018 [0234.493] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="94__CE~1.PRO")) returned 0 [0234.493] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0234.493] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\94__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 1 [0234.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\94__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\94__cellular_persimsettings_$(__iccid)_accountexperienceurl.provxml")) returned 0xffffffff [0234.494] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="95__CE~1.PRO")) returned 1 [0234.494] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\95__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.495] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.495] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1c2 [0234.495] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.496] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.597] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1c2, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1c2, lpOverlapped=0x0) returned 1 [0234.599] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0234.600] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.623] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.635] CloseHandle (hObject=0x1fc) returned 1 [0234.635] CloseHandle (hObject=0x204) returned 1 [0234.635] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\95__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0234.636] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0234.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="95__CE~1.PRO")) returned 0x7d2c58 [0234.636] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="95__CE~1.PRO")) returned 0 [0234.637] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0234.637] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\95__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0234.638] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\95__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\95__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0234.638] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="96__CO~1.PRO")) returned 1 [0234.638] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\96__connections_cellular_orange (denmark)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.638] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09yYW5nZSAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otzfx0nv3m5ly3rp325zx0nl3g413gfyx09yyw5nzsaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.639] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x287 [0234.639] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.639] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.705] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x287, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x287, lpOverlapped=0x0) returned 1 [0234.743] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0234.744] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.768] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.788] CloseHandle (hObject=0x204) returned 1 [0234.788] CloseHandle (hObject=0x1fc) returned 1 [0234.788] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\96__connections_cellular_orange (denmark)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09yYW5nZSAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otzfx0nv3m5ly3rp325zx0nl3g413gfyx09yyw5nzsaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0234.791] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09yYW5nZSAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otzfx0nv3m5ly3rp325zx0nl3g413gfyx09yyw5nzsaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0234.791] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="96__CO~1.PRO")) returned 0x7d2998 [0234.791] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="96__CO~1.PRO")) returned 0 [0234.791] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0234.791] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\96__connections_cellular_orange (denmark)_i0$(__mvid)@wap.provxml")) returned 1 [0234.792] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\96__Connections_Cellular_Orange (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\96__connections_cellular_orange (denmark)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0234.792] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="97__CE~1.PRO")) returned 1 [0234.793] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\97__cellular_persimsettings_$(__iccid)_appid.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.794] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTdfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otdfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.794] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d8 [0234.795] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.795] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0234.861] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d8, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d8, lpOverlapped=0x0) returned 1 [0234.862] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0234.863] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0234.887] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0234.898] CloseHandle (hObject=0x1fc) returned 1 [0234.898] CloseHandle (hObject=0x204) returned 1 [0234.898] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\97__cellular_persimsettings_$(__iccid)_appid.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTdfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otdfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0 [0234.899] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTdfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otdfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0x20 [0234.899] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="97__CE~1.PRO")) returned 0x7d2ad8 [0234.900] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x7c86d0, dwReserved1=0x7e6368, cFileName="97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="97__CE~1.PRO")) returned 0 [0234.900] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0234.900] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\97__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 1 [0234.901] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\97__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\97__cellular_persimsettings_$(__iccid)_appid.provxml")) returned 0xffffffff [0234.901] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x7c4810, dwReserved1=0x0, cFileName="98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="98__CO~1.PRO")) returned 1 [0234.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\98__connections_cellular_tdc denmark (denmark)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0234.901] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OT2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1REQyBEZW5tYXJrIC2EZW5tYXJrKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ot2fx0nv3m5ly3rp325zx0nl3g413gfyx1reqybezw5tyxjric2ezw5tyxjrkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0234.902] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c9 [0234.902] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0234.902] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.040] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c9, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c9, lpOverlapped=0x0) returned 1 [0235.042] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0235.043] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.066] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.077] CloseHandle (hObject=0x204) returned 1 [0235.077] CloseHandle (hObject=0x1fc) returned 1 [0235.078] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\98__connections_cellular_tdc denmark (denmark)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OT2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1REQyBEZW5tYXJrIC2EZW5tYXJrKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ot2fx0nv3m5ly3rp325zx0nl3g413gfyx1reqybezw5tyxjric2ezw5tyxjrkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0 [0235.079] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OT2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX1REQyBEZW5tYXJrIC2EZW5tYXJrKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ot2fx0nv3m5ly3rp325zx0nl3g413gfyx1reqybezw5tyxjric2ezw5tyxjrkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0x20 [0235.079] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="98__CO~1.PRO")) returned 0x7d2d58 [0235.079] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90411c14, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90411c14, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90411c14, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="98__CO~1.PRO")) returned 0 [0235.079] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0235.079] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\98__connections_cellular_tdc denmark (denmark)_i0$(__mvid)@wap.provxml")) returned 1 [0235.080] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\98__Connections_Cellular_TDC Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\98__connections_cellular_tdc denmark (denmark)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0235.080] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="99__CO~1.PRO")) returned 1 [0235.080] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\99__connections_cellular_telenor denmark (denmark)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.081] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GV633IgRGV63WFy1yAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gv633igrgv63wfy1yaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.081] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28b [0235.081] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.082] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.150] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x28b, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x28b, lpOverlapped=0x0) returned 1 [0235.151] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0235.153] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.176] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.189] CloseHandle (hObject=0x1fc) returned 1 [0235.189] CloseHandle (hObject=0x204) returned 1 [0235.189] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\99__connections_cellular_telenor denmark (denmark)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GV633IgRGV63WFy1yAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gv633igrgv63wfy1yaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0235.190] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OTlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GV633IgRGV63WFy1yAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\otlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gv633igrgv63wfy1yaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0235.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="99__CO~1.PRO")) returned 0x7d2d58 [0235.191] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="99__CO~1.PRO")) returned 0 [0235.191] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0235.191] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\99__connections_cellular_telenor denmark (denmark)_i0$(__mvid)@wap.provxml")) returned 1 [0235.192] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\99__Connections_Cellular_Telenor Denmark (Denmark)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\99__connections_cellular_telenor denmark (denmark)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0235.192] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="9__CON~1.PRO")) returned 1 [0235.192] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\9__connections_cellular_optus (australia)_i0$(__mvid)@wap.provxml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.192] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfT3B0dXMgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ov9fq2963mvjdglv3nnfq2vs3hvsyxjft3b0dxmgkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.193] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ca [0235.193] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.194] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.259] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2ca, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2ca, lpOverlapped=0x0) returned 1 [0235.262] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0235.263] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.286] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.297] CloseHandle (hObject=0x204) returned 1 [0235.297] CloseHandle (hObject=0x1fc) returned 1 [0235.297] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\9__connections_cellular_optus (australia)_i0$(__mvid)@wap.provxml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfT3B0dXMgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ov9fq2963mvjdglv3nnfq2vs3hvsyxjft3b0dxmgkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0 [0235.302] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\OV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfT3B0dXMgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ov9fq2963mvjdglv3nnfq2vs3hvsyxjft3b0dxmgkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0x20 [0235.302] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="9__CON~1.PRO")) returned 0x7d3018 [0235.302] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="9__CON~1.PRO")) returned 0 [0235.302] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0235.302] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\9__connections_cellular_optus (australia)_i0$(__mvid)@wap.provxml")) returned 1 [0235.303] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\9__Connections_Cellular_Optus (Australia)_i0$(__MVID)@WAP.provxml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\9__connections_cellular_optus (australia)_i0$(__mvid)@wap.provxml")) returned 0xffffffff [0235.303] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cf1153, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86cf1153, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86dfc1cb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7cb300, dwReserved1=0x0, cFileName="M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="M19FQ2~1.0IL")) returned 1 [0235.304] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.304] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TTE5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZWM5YwWVc1cDdXRWdLRUZzWjJW7TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tte5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzwm5ywwvc1cddxrwdlruzzwjjw7tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.306] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0235.306] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.307] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.396] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0235.396] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0235.397] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.421] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.432] CloseHandle (hObject=0x1fc) returned 1 [0235.432] CloseHandle (hObject=0x204) returned 1 [0235.432] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TTE5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZWM5YwWVc1cDdXRWdLRUZzWjJW7TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tte5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzwm5ywwvc1cddxrwdlruzzwjjw7tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0235.433] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TTE5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZWM5YwWVc1cDdXRWdLRUZzWjJW7TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tte5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzwm5ywwvc1cddxrwdlruzzwjjw7tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0235.433] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cf1153, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86cf1153, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86dfc1cb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="M19FQ2~1.0IL")) returned 0x7d3018 [0235.433] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86cf1153, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86cf1153, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86dfc1cb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="M19FQ2~1.0IL")) returned 0 [0235.433] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0235.433] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0235.435] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\M19fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfV2F0YW5p7WEgKEFsZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\m19fq2963mvjdglv3nnfq2vs3hvsyxjfv2f0yw5p7wegkefsz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0235.435] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664d5820, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x664d5820, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x666c599c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MF9FQ2~1.0IL")) returned 1 [0235.435] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.435] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TUY5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZRVzRpWVc1cFlXNGdUVzlpMVc03ElFTnYzVzE4M21s1llYUnAzMjV6SUMyQjNHSjIz3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tuy5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzrvzrpwvc1cflxngduvzlpmvc03elftnyzvze4m21s1llyunazmjv6sumyqjnhsjiz3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0235.435] CloseHandle (hObject=0x204) returned 1 [0235.436] CloseHandle (hObject=0xffffffff) returned 1 [0235.436] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TUY5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZRVzRpWVc1cFlXNGdUVzlpMVc03ElFTnYzVzE4M21s1llYUnAzMjV6SUMyQjNHSjIz3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tuy5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzrvzrpwvc1cflxngduvzlpmvc03elftnyzvze4m21s1llyunazmjv6sumyqjnhsjiz3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0235.436] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TUY5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZRVzRpWVc1cFlXNGdUVzlpMVc03ElFTnYzVzE4M21s1llYUnAzMjV6SUMyQjNHSjIz3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tuy5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzrvzrpwvc1cflxngduvzlpmvc03elftnyzvze4m21s1llyunazmjv6sumyqjnhsjiz3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0xffffffff [0235.436] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664d5820, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x664d5820, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x666c599c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MF9FQ2~1.0IL")) returned 0x7d3018 [0235.436] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x664d5820, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x664d5820, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x666c599c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MF9FQ2~1.0IL")) returned 0 [0235.436] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0235.436] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0235.438] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MF9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfQW4iYW5pYW4gTW9i1W4lIENv3W113mljYXRp325zIC2B3GJ23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mf9fq2963mvjdglv3nnfq2vs3hvsyxjfqw4iyw5pyw4gtw9i1w4lienv3w113mljyxrp325zic2b3gj23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0235.438] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a349dde, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a349dde, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a454dd2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c4170, dwReserved1=0x0, cFileName="Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ2FX0~1.0IL")) returned 1 [0235.438] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.439] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWoyZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDI4ZEdO3zFYTnYz1UF0SURNZ0tFRjFjM1J5MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twoyzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdi4zedo3zfytnyz1uf0surnz0tfrjfjm1j5mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.439] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0235.439] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.440] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.506] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0235.506] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0235.507] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.531] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.542] CloseHandle (hObject=0x204) returned 1 [0235.542] CloseHandle (hObject=0x1fc) returned 1 [0235.542] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWoyZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDI4ZEdO3zFYTnYz1UF0SURNZ0tFRjFjM1J5MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twoyzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdi4zedo3zfytnyz1uf0surnz0tfrjfjm1j5mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0235.543] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWoyZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDI4ZEdO3zFYTnYz1UF0SURNZ0tFRjFjM1J5MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twoyzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdi4zedo3zfytnyz1uf0surnz0tfrjfjm1j5mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0235.543] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a349dde, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a349dde, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a454dd2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ2FX0~1.0IL")) returned 0x7d2d58 [0235.543] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a349dde, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a349dde, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a454dd2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ2FX0~1.0IL")) returned 0 [0235.543] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0235.543] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0235.545] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX021dGNo1XNv3iAtIDMgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj2fx0nv3m5ly3rp325zx0nl3g413gfyx021dgno1xnv3iatidmgkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0235.545] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab097ed, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ab097ed, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ac86fc3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ50X1~1.0IL")) returned 1 [0235.545] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.545] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.546] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0235.546] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.546] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.656] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0235.656] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0235.657] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.680] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.691] CloseHandle (hObject=0x1fc) returned 1 [0235.691] CloseHandle (hObject=0x204) returned 1 [0235.691] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0235.692] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0235.692] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab097ed, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ab097ed, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ac86fc3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ50X1~1.0IL")) returned 0x7d3018 [0235.692] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ab097ed, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ab097ed, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ac86fc3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ50X1~1.0IL")) returned 0 [0235.693] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0235.693] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0235.694] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj50X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj50x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0235.694] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac86fc3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ac86fc3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ad91fda, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ51X1~1.0IL")) returned 1 [0235.694] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.694] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.695] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0235.697] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.697] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.764] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0235.764] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0235.765] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.798] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.809] CloseHandle (hObject=0x204) returned 1 [0235.809] CloseHandle (hObject=0x1fc) returned 1 [0235.809] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0235.810] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0235.810] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac86fc3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ac86fc3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ad91fda, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ51X1~1.0IL")) returned 0x7d2c18 [0235.810] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ac86fc3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ac86fc3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ad91fda, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ51X1~1.0IL")) returned 0 [0235.810] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0235.810] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0235.812] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj51X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj51x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0235.812] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad91fda, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ad91fda, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7aec4b8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ52X1~1.0IL")) returned 1 [0235.812] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.812] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFUSTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.813] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0235.813] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.813] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0235.880] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0235.880] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0235.881] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0235.906] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0235.918] CloseHandle (hObject=0x1fc) returned 1 [0235.918] CloseHandle (hObject=0x204) returned 1 [0235.919] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFUSTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0235.919] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03TMzSjBJQzJPWl2S31pYSnNZVzU1Y3lsZjFUSTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03tmzsjbjqzjpwl2s31pysnnzvzu1y3lszjfustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0235.919] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad91fda, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ad91fda, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7aec4b8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ52X1~1.0IL")) returned 0x7d3018 [0235.920] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ad91fda, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ad91fda, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7aec4b8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ52X1~1.0IL")) returned 0 [0235.920] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0235.920] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0235.921] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj52X19D3256ZWN01W96c19DZW4sdW42cl9UZW4m33J0IC2OZXRoZXJsYW55cylf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj52x19d3256zwn01w96c19dzw4sdw42cl9uzw4m33j0ic2ozxrozxjsyw55cylf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0235.921] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aec4b8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7aec4b8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b08cebe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ53X1~1.0IL")) returned 1 [0235.922] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.922] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1M1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JPWl2S31pYSnNZVzU1Y3lB31RtVjA4R1Z5M0dGNlpITXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1m1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jpwl2s31pysnnzvzu1y3lb31rtvja4r1z5m0dgnlpitxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0235.922] CloseHandle (hObject=0x204) returned 1 [0235.922] CloseHandle (hObject=0xffffffff) returned 1 [0235.922] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1M1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JPWl2S31pYSnNZVzU1Y3lB31RtVjA4R1Z5M0dGNlpITXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1m1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jpwl2s31pysnnzvzu1y3lb31rtvja4r1z5m0dgnlpitxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0235.922] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1M1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JPWl2S31pYSnNZVzU1Y3lB31RtVjA4R1Z5M0dGNlpITXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1m1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jpwl2s31pysnnzvzu1y3lb31rtvja4r1z5m0dgnlpitxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0235.922] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aec4b8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7aec4b8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b08cebe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ53X1~1.0IL")) returned 0x7d3018 [0235.923] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7aec4b8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7aec4b8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b08cebe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ53X1~1.0IL")) returned 0 [0235.923] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0235.923] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0235.924] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj53X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBOZXRoZXJsYW55cyAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj53x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbozxrozxjsyw55cyaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0235.924] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a55fcbe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a55fcbe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a79c289, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x430055, dwReserved1=0x770035, cFileName="Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJ54X1~1.0IL")) returned 1 [0235.924] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0235.925] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE9TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce9tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0235.925] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0235.925] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0235.926] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.046] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0236.046] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0236.047] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.071] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.082] CloseHandle (hObject=0x204) returned 1 [0236.082] CloseHandle (hObject=0x1fc) returned 1 [0236.082] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE9TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce9tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0236.083] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE9TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce9tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0236.083] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a55fcbe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a55fcbe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a79c289, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJ54X1~1.0IL")) returned 0x7d3018 [0236.083] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a55fcbe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a55fcbe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a79c289, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJ54X1~1.0IL")) returned 0 [0236.083] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0236.083] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0236.084] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9posqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0236.085] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b08cebe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b08cebe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b197f37, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ54X1~2.0IL")) returned 1 [0236.085] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0236.085] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JPVENB31RtVjA4R1Z5M0dGNlpITXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jpvenb31rtvja4r1z5m0dgnlpitxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0236.086] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0236.086] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0236.086] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.155] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0236.155] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0236.156] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.179] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.191] CloseHandle (hObject=0x1fc) returned 1 [0236.191] CloseHandle (hObject=0x204) returned 1 [0236.191] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JPVENB31RtVjA4R1Z5M0dGNlpITXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jpvenb31rtvja4r1z5m0dgnlpitxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0236.192] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JPVENB31RtVjA4R1Z5M0dGNlpITXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jpvenb31rtvja4r1z5m0dgnlpitxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0236.192] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b08cebe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b08cebe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b197f37, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ54X1~2.0IL")) returned 0x7d2b98 [0236.192] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b08cebe, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b08cebe, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b197f37, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ54X1~2.0IL")) returned 0 [0236.192] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0236.192] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0236.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOTCAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbotcaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0236.193] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b197f37, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b197f37, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b2a314d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ55X1~1.0IL")) returned 1 [0236.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0236.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0236.195] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0236.195] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0236.196] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.261] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0236.262] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0236.263] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.286] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.297] CloseHandle (hObject=0x204) returned 1 [0236.298] CloseHandle (hObject=0x1fc) returned 1 [0236.298] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0236.299] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1NVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1nvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0236.299] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b197f37, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b197f37, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b2a314d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ55X1~1.0IL")) returned 0x7d2c58 [0236.299] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b197f37, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b197f37, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b2a314d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJ55X1~1.0IL")) returned 0 [0236.299] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0236.299] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0236.300] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj55X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj55x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0236.300] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a454dd2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a454dd2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a55fcbe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJ5WX1~1.0IL")) returned 1 [0236.301] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0236.301] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE9DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce9duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0236.302] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0236.302] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0236.302] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.406] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0236.406] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0236.407] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.431] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.442] CloseHandle (hObject=0x1fc) returned 1 [0236.442] CloseHandle (hObject=0x204) returned 1 [0236.442] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE9DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce9duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0236.443] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE9DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce9duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0236.443] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a454dd2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a454dd2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a55fcbe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJ5WX1~1.0IL")) returned 0x7d2998 [0236.443] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a454dd2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a454dd2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a55fcbe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJ5WX1~1.0IL")) returned 0 [0236.443] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0236.444] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0236.445] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5wX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pOCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5wx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pocqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0236.447] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a79c289, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a79c289, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a8a727c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ5YX1~1.0IL")) returned 1 [0236.447] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0236.447] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo17Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9U3VYwMUdW7TNHRjZ1SE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two17vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9u3vywmudw7tnhrjz1se1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0236.448] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0236.448] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0236.449] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.519] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0236.519] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0236.520] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.544] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.558] CloseHandle (hObject=0x204) returned 1 [0236.558] CloseHandle (hObject=0x1fc) returned 1 [0236.558] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo17Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9U3VYwMUdW7TNHRjZ1SE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two17vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9u3vywmudw7tnhrjz1se1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0236.559] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo17Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9U3VYwMUdW7TNHRjZ1SE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two17vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9u3vywmudw7tnhrjz1se1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0236.559] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a79c289, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a79c289, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a8a727c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ5YX1~1.0IL")) returned 0x7d2cd8 [0236.560] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a79c289, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a79c289, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a8a727c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ5YX1~1.0IL")) returned 0 [0236.560] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0236.560] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0236.561] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5yX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5yx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0236.561] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8cd53c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a8cd53c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7aae35b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ5ZX1~1.0IL")) returned 1 [0236.561] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0236.562] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9U3VYwMUdW7TNHRjZ1SE1wWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9u3vywmudw7tnhrjz1se1wwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0236.562] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0236.563] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0236.563] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.628] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0236.628] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0236.629] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.654] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0236.665] CloseHandle (hObject=0x1fc) returned 1 [0236.665] CloseHandle (hObject=0x204) returned 1 [0236.665] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9U3VYwMUdW7TNHRjZ1SE1wWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9u3vywmudw7tnhrjz1se1wwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0236.666] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWo17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9U3VYwMUdW7TNHRjZ1SE1wWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\two17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9u3vywmudw7tnhrjz1se1wwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0236.666] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8cd53c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a8cd53c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7aae35b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ5ZX1~1.0IL")) returned 0x7d2998 [0236.666] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a8cd53c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a8cd53c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7aae35b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJ5ZX1~1.0IL")) returned 0 [0236.666] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0236.666] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0236.668] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mj5zX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTmV01GVy3GF6ZHMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mj5zx19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotmv01gvy3gf6zhmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0236.668] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71928caf, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71928caf, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71acc644, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA0X1~1.0IL")) returned 1 [0236.668] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0236.668] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0236.669] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d0 [0236.669] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0236.670] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0236.782] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0236.782] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0236.785] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0236.809] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.073] CloseHandle (hObject=0x204) returned 1 [0237.073] CloseHandle (hObject=0x1fc) returned 1 [0237.076] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0237.077] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0237.077] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71928caf, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71928caf, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71acc644, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA0X1~1.0IL")) returned 0x7d2a58 [0237.077] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71928caf, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71928caf, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71acc644, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA0X1~1.0IL")) returned 0 [0237.077] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0237.077] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 1 [0237.079] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0xffffffff [0237.084] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71acc644, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71acc644, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71bfd8b5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA1X1~1.0IL")) returned 1 [0237.084] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.084] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQTWlB31NYSmwzR0Y2W5NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqtwlb31nysmwzr0y2w5nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.085] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0237.085] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.085] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.154] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0237.154] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0237.155] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.179] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.190] CloseHandle (hObject=0x1fc) returned 1 [0237.190] CloseHandle (hObject=0x204) returned 1 [0237.190] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQTWlB31NYSmwzR0Y2W5NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqtwlb31nysmwzr0y2w5nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0237.191] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQTWlB31NYSmwzR0Y2W5NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqtwlb31nysmwzr0y2w5nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0237.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71acc644, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71acc644, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71bfd8b5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA1X1~1.0IL")) returned 0x7d2998 [0237.191] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71acc644, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71acc644, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71bfd8b5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA1X1~1.0IL")) returned 0 [0237.192] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0237.192] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0237.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA1X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoSXJl3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja1x19d3256zwn01w96c19dzw4sdw42cl9pmiaosxjl3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0237.193] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c23857, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71c23857, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71d0c552, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJA2X1~1.0IL")) returned 1 [0237.193] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKY21Wc1lXNTVJQzJKY21Wc1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jky21wc1lxntvjqzjky21wc1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.194] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x370 [0237.194] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.195] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.253] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x370, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0237.254] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0237.255] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.278] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.289] CloseHandle (hObject=0x204) returned 1 [0237.290] CloseHandle (hObject=0x1fc) returned 1 [0237.290] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKY21Wc1lXNTVJQzJKY21Wc1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jky21wc1lxntvjqzjky21wc1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0237.291] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKY21Wc1lXNTVJQzJKY21Wc1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jky21wc1lxntvjqzjky21wc1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0237.291] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c23857, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71c23857, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71d0c552, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJA2X1~1.0IL")) returned 0x7d2c18 [0237.291] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71c23857, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71c23857, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71d0c552, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJA2X1~1.0IL")) returned 0 [0237.291] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0237.291] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0237.292] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJcmVsYW55IC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjcmvsyw55ic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0237.292] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d0c552, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71d0c552, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71f94bbd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA3X1~1.0IL")) returned 1 [0237.293] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.293] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.294] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0237.294] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.294] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.392] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0237.393] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0237.394] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.417] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.428] CloseHandle (hObject=0x1fc) returned 1 [0237.428] CloseHandle (hObject=0x204) returned 1 [0237.428] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0237.429] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0237.429] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d0c552, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71d0c552, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71f94bbd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA3X1~1.0IL")) returned 0x7d2c98 [0237.430] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71d0c552, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71d0c552, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71f94bbd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA3X1~1.0IL")) returned 0 [0237.430] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0237.430] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0237.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0237.431] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94bbd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71f94bbd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7215b6f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJA4X1~2.0IL")) returned 1 [0237.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc0c15yOXRJQzJKYzNKMlpXd3BYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc0c15yoxrjqzjkyznkmlpxd3bymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.432] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0237.432] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.433] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.498] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0237.498] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0237.499] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.523] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.534] CloseHandle (hObject=0x204) returned 1 [0237.534] CloseHandle (hObject=0x1fc) returned 1 [0237.534] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc0c15yOXRJQzJKYzNKMlpXd3BYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc0c15yoxrjqzjkyznkmlpxd3bymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0237.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc0c15yOXRJQzJKYzNKMlpXd3BYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc0c15yoxrjqzjkyznkmlpxd3bymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0237.535] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94bbd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71f94bbd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7215b6f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJA4X1~2.0IL")) returned 0x7d2918 [0237.535] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71f94bbd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71f94bbd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7215b6f4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJA4X1~2.0IL")) returned 0 [0237.535] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0237.535] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0237.537] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sY29tIC2Jc3J2ZWwpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9dzw4sy29tic2jc3j2zwwpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0237.537] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71548f62, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71548f62, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x716540fc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJA4X1~1.0IL")) returned 1 [0237.537] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.538] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMMzNK3DE4UmwzR1ZqMzIwZ0tF3HlZWEVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmmznk3de4umwzr1zqmziwz0tf3hlzwevwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.538] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0237.538] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.539] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.608] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0237.608] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0237.609] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.635] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.648] CloseHandle (hObject=0x1fc) returned 1 [0237.649] CloseHandle (hObject=0x204) returned 1 [0237.649] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMMzNK3DE4UmwzR1ZqMzIwZ0tF3HlZWEVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmmznk3de4umwzr1zqmziwz0tf3hlzwevwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0237.650] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMMzNK3DE4UmwzR1ZqMzIwZ0tF3HlZWEVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmmznk3de4umwzr1zqmziwz0tf3hlzwevwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0237.650] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71548f62, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71548f62, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x716540fc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJA4X1~1.0IL")) returned 0x7d2b58 [0237.651] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71548f62, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71548f62, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x716540fc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJA4X1~1.0IL")) returned 0 [0237.651] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0237.651] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0237.653] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA4X19D3256ZWN01W96c19DZW4sdW42cl9L33Jl11Rl3GVj320gKElyYXEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja4x19d3256zwn01w96c19dzw4sdw42cl9l33jl11rl3gvj320gkelyyxepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0237.653] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215b6f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7215b6f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7223fb80, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA5X1~1.0IL")) returned 1 [0237.654] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.654] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRW46Y21G3DND3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrw46y21g3dnd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.656] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0237.656] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.656] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.760] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0237.760] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0237.762] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.796] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.809] CloseHandle (hObject=0x204) returned 1 [0237.809] CloseHandle (hObject=0x1fc) returned 1 [0237.809] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRW46Y21G3DND3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrw46y21g3dnd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0237.810] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRW46Y21G3DND3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrw46y21g3dnd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0237.810] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215b6f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7215b6f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7223fb80, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA5X1~1.0IL")) returned 0x7d3018 [0237.811] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7215b6f4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7215b6f4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7223fb80, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJA5X1~1.0IL")) returned 0 [0237.811] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0237.811] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0237.812] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjA5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mja5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0237.813] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7143df0f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7143df0f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71548f62, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJAWX1~1.0IL")) returned 1 [0237.813] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.813] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCYzJsMlEyVnMzQ0FvU12KMmNT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcyzjsmleyvnmzq0fvu12kmmnt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.815] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0237.815] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.815] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0237.881] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0237.881] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0237.883] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0237.906] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0237.917] CloseHandle (hObject=0x1fc) returned 1 [0237.917] CloseHandle (hObject=0x204) returned 1 [0237.917] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCYzJsMlEyVnMzQ0FvU12KMmNT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcyzjsmleyvnmzq0fvu12kmmnt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0237.918] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCYzJsMlEyVnMzQ0FvU12KMmNT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcyzjsmleyvnmzq0fvu12kmmnt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0237.918] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7143df0f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7143df0f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71548f62, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJAWX1~1.0IL")) returned 0x7d2b18 [0237.919] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7143df0f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7143df0f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71548f62, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJAWX1~1.0IL")) returned 0 [0237.919] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0237.919] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0237.920] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAwX19D3256ZWN01W96c19DZW4sdW42cl9Bc2l2Q2Vs3CAoSXJ2cSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjawx19d3256zwn01w96c19dzw4sdw42cl9bc2l2q2vs3caosxj2cslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0237.920] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7167a270, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7167a270, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7181db24, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJAYX1~1.0IL")) returned 1 [0237.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0237.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5pj3UY0S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5pj3uy0s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0237.921] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0237.921] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0237.922] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.033] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0238.033] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0238.034] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.058] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.070] CloseHandle (hObject=0x204) returned 1 [0238.070] CloseHandle (hObject=0x1fc) returned 1 [0238.070] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5pj3UY0S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5pj3uy0s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0238.071] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5pj3UY0S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5pj3uy0s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0238.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7167a270, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7167a270, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7181db24, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJAYX1~1.0IL")) returned 0x7d2b98 [0238.071] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7167a270, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7167a270, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7181db24, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJAYX1~1.0IL")) returned 0 [0238.071] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0238.071] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0238.073] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAyX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2JcmF4KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjayx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2jcmf4kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0238.073] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71843fc7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71843fc7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71928caf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJAZX1~1.0IL")) returned 1 [0238.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySmNtVnNZVzU1S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumysmntvnnzvzu1s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.074] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0238.074] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.074] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.141] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0238.141] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0238.155] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.178] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.190] CloseHandle (hObject=0x1fc) returned 1 [0238.190] CloseHandle (hObject=0x204) returned 1 [0238.190] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySmNtVnNZVzU1S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumysmntvnnzvzu1s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0238.191] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySmNtVnNZVzU1S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumysmntvnnzvzu1s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0238.191] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71843fc7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71843fc7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71928caf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJAZX1~1.0IL")) returned 0x7d3018 [0238.191] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71843fc7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x71843fc7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x71928caf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJAZX1~1.0IL")) returned 0 [0238.191] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0238.191] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0238.193] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjAzX19D3256ZWN01W96c19DZW4sdW42cl8zIC2JcmVsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjazx19d3256zwn01w96c19dzw4sdw42cl8zic2jcmvsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0238.193] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72265daf, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72265daf, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72370e23, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJBFX0~1.0IL")) returned 1 [0238.193] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.194] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.194] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0238.194] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.195] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.296] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0238.296] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0238.297] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.321] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.334] CloseHandle (hObject=0x204) returned 1 [0238.334] CloseHandle (hObject=0x1fc) returned 1 [0238.334] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0238.335] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0238.335] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72265daf, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72265daf, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72370e23, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJBFX0~1.0IL")) returned 0x7d2d58 [0238.335] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72265daf, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72265daf, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72370e23, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJBFX0~1.0IL")) returned 0 [0238.335] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0238.336] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0238.337] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjbfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0238.338] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d762fb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78d762fb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78eca929, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC0X1~1.0IL")) returned 1 [0238.338] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.338] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWV2Kdll5QlV1VzRsWTI5dElDM54zM0p2WTJOd5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowv2kdll5qlv1vzrswti5deldm54zm0p2wtjod5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.339] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0238.339] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.340] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.410] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0238.410] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0238.411] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.435] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.446] CloseHandle (hObject=0x1fc) returned 1 [0238.446] CloseHandle (hObject=0x204) returned 1 [0238.447] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWV2Kdll5QlV1VzRsWTI5dElDM54zM0p2WTJOd5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowv2kdll5qlv1vzrswti5deldm54zm0p2wtjod5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0238.448] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWV2Kdll5QlV1VzRsWTI5dElDM54zM0p2WTJOd5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowv2kdll5qlv1vzrswti5deldm54zm0p2wtjod5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0238.448] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d762fb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78d762fb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78eca929, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC0X1~1.0IL")) returned 0x7d2a58 [0238.448] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78d762fb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78d762fb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78eca929, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC0X1~1.0IL")) returned 0 [0238.448] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0238.448] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0238.449] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc0X19D3256ZWN01W96c19DZW4sdW42cl9NYXJvYyBUZW4lY29tIC2N33JvY2NvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc0x19d3256zwn01w96c19dzw4sdw42cl9nyxjvyybuzw4ly29tic2n33jvy2nvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0238.449] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ef0b58, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78ef0b58, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78ffbb91, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJC1X1~1.0IL")) returned 1 [0238.450] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.450] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMl5yOXRJRTF2N21GdFlt3DR5V1VnS0U4djdtRnRZ3Ww0ZFdVcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsml5yoxrjrtf2n21gdflt3dr5v1vns0u4djdtrnrz3ww0zfdvcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.451] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0238.451] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.451] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.518] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0238.518] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0238.519] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.542] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.555] CloseHandle (hObject=0x204) returned 1 [0238.555] CloseHandle (hObject=0x1fc) returned 1 [0238.556] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMl5yOXRJRTF2N21GdFlt3DR5V1VnS0U4djdtRnRZ3Ww0ZFdVcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsml5yoxrjrtf2n21gdflt3dr5v1vns0u4djdtrnrz3ww0zfdvcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0238.556] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMl5yOXRJRTF2N21GdFlt3DR5V1VnS0U4djdtRnRZ3Ww0ZFdVcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsml5yoxrjrtf2n21gdflt3dr5v1vns0u4djdtrnrz3ww0zfdvcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0238.557] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ef0b58, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78ef0b58, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78ffbb91, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJC1X1~1.0IL")) returned 0x7d29d8 [0238.557] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ef0b58, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78ef0b58, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78ffbb91, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJC1X1~1.0IL")) returned 0 [0238.557] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0238.557] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0238.558] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE1v7mFtYml4dWUgKE1v7mFtYml4dWUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc1x19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie1v7mftyml4dwugke1v7mftyml4dwupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0238.559] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffbb91, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78ffbb91, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79106bab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC2X1~1.0IL")) returned 1 [0238.559] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.559] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.560] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0238.560] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.560] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.666] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0238.666] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0238.667] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.691] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.702] CloseHandle (hObject=0x1fc) returned 1 [0238.702] CloseHandle (hObject=0x204) returned 1 [0238.703] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0238.703] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0238.703] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffbb91, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78ffbb91, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79106bab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC2X1~1.0IL")) returned 0x7d3018 [0238.704] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78ffbb91, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78ffbb91, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79106bab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC2X1~1.0IL")) returned 0 [0238.704] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0238.704] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0238.705] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0238.705] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79106bab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79106bab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x792aa603, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC3X1~1.0IL")) returned 1 [0238.706] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.706] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.707] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0238.707] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.707] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.773] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0238.773] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0238.774] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.809] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.820] CloseHandle (hObject=0x204) returned 1 [0238.820] CloseHandle (hObject=0x1fc) returned 1 [0238.820] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0238.821] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0238.821] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79106bab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79106bab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x792aa603, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC3X1~1.0IL")) returned 0x7d3018 [0238.821] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79106bab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79106bab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x792aa603, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC3X1~1.0IL")) returned 0 [0238.821] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0238.821] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0238.823] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0238.823] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792d0816, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x792d0816, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7945dd86, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJC4X1~2.0IL")) returned 1 [0238.823] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.823] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.824] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0238.824] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.824] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0238.891] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0238.892] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0238.893] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0238.916] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0238.976] CloseHandle (hObject=0x1fc) returned 1 [0238.976] CloseHandle (hObject=0x204) returned 1 [0238.976] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0238.977] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0238.977] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792d0816, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x792d0816, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7945dd86, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJC4X1~2.0IL")) returned 0x7d2c18 [0238.977] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x792d0816, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x792d0816, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7945dd86, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJC4X1~2.0IL")) returned 0 [0238.977] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0238.977] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0238.979] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0238.979] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781da9dc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x781da9dc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x784d5682, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC4X1~1.0IL")) returned 1 [0238.979] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0238.979] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJOMzI1MFpXNW41M0p2S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjomzi1mfpxnw41m0p2s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0238.983] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x390 [0238.983] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0238.984] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.050] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0239.050] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3a0, lpOverlapped=0x0) returned 1 [0239.051] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.077] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.088] CloseHandle (hObject=0x204) returned 1 [0239.088] CloseHandle (hObject=0x1fc) returned 1 [0239.088] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJOMzI1MFpXNW41M0p2S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjomzi1mfpxnw41m0p2s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0239.089] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJOMzI1MFpXNW41M0p2S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjomzi1mfpxnw41m0p2s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0239.089] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781da9dc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x781da9dc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x784d5682, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC4X1~1.0IL")) returned 0x7d2b58 [0239.090] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781da9dc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x781da9dc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x784d5682, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJC4X1~1.0IL")) returned 0 [0239.090] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0239.090] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0239.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2N3250ZW5lZ3JvKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2n3250zw5lz3jvkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0239.091] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x794676be, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x794676be, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79560544, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJC5X1~1.0IL")) returned 1 [0239.092] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.092] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1URTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1urtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.092] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0239.092] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.093] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.161] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0239.161] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0239.162] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.185] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.246] CloseHandle (hObject=0x1fc) returned 1 [0239.246] CloseHandle (hObject=0x204) returned 1 [0239.246] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1URTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1urtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0239.247] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1URTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1urtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0239.247] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x794676be, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x794676be, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79560544, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJC5X1~1.0IL")) returned 0x7d3018 [0239.247] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x794676be, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x794676be, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79560544, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJC5X1~1.0IL")) returned 0 [0239.248] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0239.248] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0239.249] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjc5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjc5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmte5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0239.249] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780cf8ee, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x780cf8ee, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x781da9dc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJCWX1~1.0IL")) returned 1 [0239.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyTlpYMnBZMj2wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumytlpymnbzmj2wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.250] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0239.251] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.251] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.348] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0239.348] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0239.349] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.373] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.384] CloseHandle (hObject=0x204) returned 1 [0239.384] CloseHandle (hObject=0x1fc) returned 1 [0239.384] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyTlpYMnBZMj2wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumytlpymnbzmj2wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0239.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyTlpYMnBZMj2wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumytlpymnbzmj2wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0239.385] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780cf8ee, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x780cf8ee, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x781da9dc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJCWX1~1.0IL")) returned 0x7d3018 [0239.385] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x780cf8ee, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x780cf8ee, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x781da9dc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJCWX1~1.0IL")) returned 0 [0239.386] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0239.386] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0239.387] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcwx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0239.387] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784d5682, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x784d5682, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78606aeb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJCYX1~1.0IL")) returned 1 [0239.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0FvVFc5NmRHVjZ1V2R5M3lsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0fvvfc5nmrhvjz1v2r5m3lszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.388] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0239.388] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.389] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.456] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0239.456] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0239.457] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.481] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.492] CloseHandle (hObject=0x1fc) returned 1 [0239.493] CloseHandle (hObject=0x204) returned 1 [0239.493] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0FvVFc5NmRHVjZ1V2R5M3lsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0fvvfc5nmrhvjz1v2r5m3lszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0239.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0FvVFc5NmRHVjZ1V2R5M3lsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0fvvfc5nmrhvjz1v2r5m3lszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0239.494] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784d5682, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x784d5682, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78606aeb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJCYX1~1.0IL")) returned 0x7d2ad8 [0239.494] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x784d5682, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x784d5682, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78606aeb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJCYX1~1.0IL")) returned 0 [0239.494] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0239.494] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0239.495] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjcyX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoTW96dGV6ZWdy3ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjcyx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaotw96dgv6zwdy3ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0239.496] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78606aeb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78606aeb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78d762fb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJCZX1~1.0IL")) returned 1 [0239.496] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.496] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEY201dloyOXljMnRwSUZS3DNHVnIzMjBnS0U4djN6Umwz3VZ6Y204cFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dley201dloyoxljmnrwsuzs3dnhvnizmjbns0u4djn6umwz3vz6y204cfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.497] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0239.497] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.497] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.563] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0239.563] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0239.565] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.588] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.600] CloseHandle (hObject=0x204) returned 1 [0239.600] CloseHandle (hObject=0x1fc) returned 1 [0239.600] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEY201dloyOXljMnRwSUZS3DNHVnIzMjBnS0U4djN6Umwz3VZ6Y204cFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dley201dloyoxljmnrwsuzs3dnhvnizmjbns0u4djn6umwz3vz6y204cfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0239.601] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEY201dloyOXljMnRwSUZS3DNHVnIzMjBnS0U4djN6Umwz3VZ6Y204cFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dley201dloyoxljmnrwsuzs3dnhvnizmjbns0u4djn6umwz3vz6y204cfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0239.601] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78606aeb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78606aeb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78d762fb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJCZX1~1.0IL")) returned 0x7d3098 [0239.601] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78606aeb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x78606aeb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x78d762fb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJCZX1~1.0IL")) returned 0 [0239.601] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0239.601] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0239.602] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjczX19D3256ZWN01W96c19DZW4sdW42cl9Dcm5vZ29yc2tpIFRl3GVr320gKE1v3nRl3mVncm8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjczx19d3256zwn01w96c19dzw4sdw42cl9dcm5vz29yc2tpifrl3gvr320gke1v3nrl3mvncm8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0239.603] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79560544, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79560544, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79652eb1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJDFX0~1.0IL")) returned 1 [0239.603] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.603] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWp5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEU0SUMyQmRYTjBj3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twp5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymeu0sumyqmrytjbj3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.604] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0239.604] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.604] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.702] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0239.703] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0239.704] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.728] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.739] CloseHandle (hObject=0x1fc) returned 1 [0239.740] CloseHandle (hObject=0x204) returned 1 [0239.740] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWp5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEU0SUMyQmRYTjBj3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twp5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymeu0sumyqmrytjbj3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0239.741] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWp5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEU0SUMyQmRYTjBj3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twp5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymeu0sumyqmrytjbj3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0239.741] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79560544, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79560544, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79652eb1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJDFX0~1.0IL")) returned 0x7d3018 [0239.741] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79560544, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79560544, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79652eb1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJDFX0~1.0IL")) returned 0 [0239.741] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0239.741] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0239.742] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjdfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0239.743] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728b7af3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x728b7af3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72b8ca80, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJE0X1~1.0IL")) returned 1 [0239.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.743] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKV5NB31NYUjIzSDVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jkv5nb31nyujizsdvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.744] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0239.744] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.744] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.819] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0239.819] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0239.820] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0239.845] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0239.857] CloseHandle (hObject=0x204) returned 1 [0239.857] CloseHandle (hObject=0x1fc) returned 1 [0239.857] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKV5NB31NYUjIzSDVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jkv5nb31nyujizsdvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0239.858] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKV5NB31NYUjIzSDVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jkv5nb31nyujizsdvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0239.858] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728b7af3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x728b7af3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72b8ca80, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJE0X1~1.0IL")) returned 0x7d2c98 [0239.858] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x728b7af3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x728b7af3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72b8ca80, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJE0X1~1.0IL")) returned 0 [0239.858] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0239.858] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0239.860] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE0X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJVCAoSXR23H5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje0x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjvcaosxr23h5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0239.860] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b8ca80, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72b8ca80, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72c97ada, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE1X1~1.0IL")) returned 1 [0239.860] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0239.860] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0239.861] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0239.861] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0239.861] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0239.978] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0239.978] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0239.979] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.002] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.013] CloseHandle (hObject=0x1fc) returned 1 [0240.013] CloseHandle (hObject=0x204) returned 1 [0240.014] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0240.014] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0240.014] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b8ca80, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72b8ca80, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72c97ada, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE1X1~1.0IL")) returned 0x7d2918 [0240.015] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72b8ca80, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72b8ca80, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72c97ada, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE1X1~1.0IL")) returned 0 [0240.015] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0240.015] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0240.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.016] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c97ada, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72c97ada, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72da2b41, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE2X1~1.0IL")) returned 1 [0240.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.017] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYMVc1NUlDM5p5R0ZzN1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlymvc1nuldm5p5r0zzn1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.019] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0240.019] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.019] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.085] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0240.085] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0240.086] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.109] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.121] CloseHandle (hObject=0x204) returned 1 [0240.121] CloseHandle (hObject=0x1fc) returned 1 [0240.122] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYMVc1NUlDM5p5R0ZzN1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlymvc1nuldm5p5r0zzn1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0240.122] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYMVc1NUlDM5p5R0ZzN1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlymvc1nuldm5p5r0zzn1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0240.123] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c97ada, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72c97ada, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72da2b41, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE2X1~1.0IL")) returned 0x7d3018 [0240.123] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72c97ada, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72c97ada, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72da2b41, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE2X1~1.0IL")) returned 0 [0240.123] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0240.123] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0240.124] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE2X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje2x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.124] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72da2b41, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72da2b41, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72eadbe7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE3X1~1.0IL")) returned 1 [0240.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.125] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYMVc1NUlDM5p5R0ZzN1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlymvc1nuldm5p5r0zzn1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.126] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0240.126] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.126] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.193] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0240.193] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0240.194] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.218] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.230] CloseHandle (hObject=0x1fc) returned 1 [0240.230] CloseHandle (hObject=0x204) returned 1 [0240.230] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYMVc1NUlDM5p5R0ZzN1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlymvc1nuldm5p5r0zzn1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0240.231] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYMVc1NUlDM5p5R0ZzN1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlymvc1nuldm5p5r0zzn1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0240.231] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72da2b41, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72da2b41, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72eadbe7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE3X1~1.0IL")) returned 0x7d3098 [0240.231] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72da2b41, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72da2b41, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x72eadbe7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE3X1~1.0IL")) returned 0 [0240.231] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0240.231] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0240.233] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE3X19D3256ZWN01W96c19DZW4sdW42cl9X1W55IC2JdGFs7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje3x19d3256zwn01w96c19dzw4sdw42cl9x1w55ic2jdgfs7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.233] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72eadbe7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72eadbe7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x730050ef, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE4X1~2.0IL")) returned 1 [0240.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.233] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9T3UZ0WVds1llT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9t3uz0wvds1llt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.234] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0240.234] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.234] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.335] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0240.336] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0240.337] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.360] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.371] CloseHandle (hObject=0x204) returned 1 [0240.372] CloseHandle (hObject=0x1fc) returned 1 [0240.372] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9T3UZ0WVds1llT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9t3uz0wvds1llt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0240.373] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9T3UZ0WVds1llT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9t3uz0wvds1llt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0240.373] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72eadbe7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72eadbe7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x730050ef, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE4X1~2.0IL")) returned 0x7d3018 [0240.373] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72eadbe7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x72eadbe7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x730050ef, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE4X1~2.0IL")) returned 0 [0240.373] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0240.373] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0240.374] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.375] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a2237, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x724a2237, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x725ad23a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE4X1~1.0IL")) returned 1 [0240.375] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.375] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.376] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0240.376] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.376] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.457] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0240.458] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0240.459] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.482] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.493] CloseHandle (hObject=0x1fc) returned 1 [0240.493] CloseHandle (hObject=0x204) returned 1 [0240.494] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0240.494] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0240.494] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a2237, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x724a2237, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x725ad23a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE4X1~1.0IL")) returned 0x7d3018 [0240.495] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x724a2237, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x724a2237, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x725ad23a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE4X1~1.0IL")) returned 0 [0240.495] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0240.495] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 1 [0240.496] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.496] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x730050ef, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x730050ef, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x730e9f3c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE5X1~1.0IL")) returned 1 [0240.497] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.497] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9T3UZ0WVds1llT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9t3uz0wvds1llt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.497] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x300 [0240.497] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.498] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.564] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x300, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0240.567] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0240.568] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.591] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.602] CloseHandle (hObject=0x204) returned 1 [0240.602] CloseHandle (hObject=0x1fc) returned 1 [0240.602] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9T3UZ0WVds1llT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9t3uz0wvds1llt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0240.603] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9T3UZ0WVds1llT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9t3uz0wvds1llt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0240.603] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x730050ef, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x730050ef, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x730e9f3c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE5X1~1.0IL")) returned 0x7d2d58 [0240.603] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x730050ef, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x730050ef, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x730e9f3c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJE5X1~1.0IL")) returned 0 [0240.603] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0240.604] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0240.605] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjE5X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSmFtYWljYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mje5x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosmftywljyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.605] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7239713d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7239713d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7247bebf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJEWX1~1.0IL")) returned 1 [0240.605] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.606] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRWlc03GNHMnYz3VVnS0Vs7mNtRmwzQ24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrwlc03gnhmnyz3vvns0vs7mntrmwzq24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.606] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0240.606] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.607] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.721] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0240.721] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0240.722] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.745] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.758] CloseHandle (hObject=0x1fc) returned 1 [0240.758] CloseHandle (hObject=0x204) returned 1 [0240.758] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRWlc03GNHMnYz3VVnS0Vs7mNtRmwzQ24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrwlc03gnhmnyz3vvns0vs7mntrmwzq24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0240.759] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRWlc03GNHMnYz3VVnS0Vs7mNtRmwzQ24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrwlc03gnhmnyz3vvns0vs7mntrmwzq24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0240.759] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7239713d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7239713d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7247bebf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJEWX1~1.0IL")) returned 0x7d2a58 [0240.759] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7239713d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7239713d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7247bebf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJEWX1~1.0IL")) returned 0 [0240.759] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0240.759] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0240.761] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEwX19D3256ZWN01W96c19DZW4sdW42cl9QZW4lcG2v3mUgKElzcmFl3Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjewx19d3256zwn01w96c19dzw4sdw42cl9qzw4lcg2v3mugkelzcmfl3clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0240.761] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ad23a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x725ad23a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x727058b1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJEYX1~1.0IL")) returned 1 [0240.761] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.761] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1UwZ0tF3DBZVzQ1S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1uwz0tf3dbzvzq1s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.762] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0240.762] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.762] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.838] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0240.838] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0240.839] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0240.864] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0240.876] CloseHandle (hObject=0x204) returned 1 [0240.876] CloseHandle (hObject=0x1fc) returned 1 [0240.876] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1UwZ0tF3DBZVzQ1S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1uwz0tf3dbzvzq1s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0240.877] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1UwZ0tF3DBZVzQ1S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1uwz0tf3dbzvzq1s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0240.877] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ad23a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x725ad23a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x727058b1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJEYX1~1.0IL")) returned 0x7d2b58 [0240.877] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x725ad23a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x725ad23a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x727058b1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJEYX1~1.0IL")) returned 0 [0240.877] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0240.877] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0240.879] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEyX19D3256ZWN01W96c19DZW4sdW42cl9USU0gKEl0YW45KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjeyx19d3256zwn01w96c19dzw4sdw42cl9usu0gkel0yw45kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0240.879] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727058b1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x727058b1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x728a7749, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJEZX1~1.0IL")) returned 1 [0240.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0240.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpF7lg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpf7lg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0240.880] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d0 [0240.880] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0240.881] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0240.998] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0240.999] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0241.000] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.024] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.035] CloseHandle (hObject=0x1fc) returned 1 [0241.035] CloseHandle (hObject=0x204) returned 1 [0241.036] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpF7lg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpf7lg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0241.037] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpF7lg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpf7lg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0241.037] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727058b1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x727058b1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x728a7749, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJEZX1~1.0IL")) returned 0x7d2c18 [0241.037] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x727058b1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x727058b1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x728a7749, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJEZX1~1.0IL")) returned 0 [0241.037] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0241.037] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0241.038] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjEzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjezx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0241.038] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7310ffd0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7310ffd0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x731f4d0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJFFX0~1.0IL")) returned 1 [0241.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.039] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRFNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrfnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.040] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0241.040] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.040] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0241.107] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0241.107] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0241.108] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.132] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.143] CloseHandle (hObject=0x204) returned 1 [0241.143] CloseHandle (hObject=0x1fc) returned 1 [0241.143] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRFNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrfnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0241.144] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRFNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrfnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0241.144] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7310ffd0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7310ffd0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x731f4d0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJFFX0~1.0IL")) returned 0x7d3018 [0241.144] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7310ffd0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7310ffd0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x731f4d0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJFFX0~1.0IL")) returned 0 [0241.144] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0241.144] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0241.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjffx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0241.146] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b3dc92, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79b3dc92, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79c48ee1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG0X1~1.0IL")) returned 1 [0241.146] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.147] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1pUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1puw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.147] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0241.147] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.149] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0241.223] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0241.224] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0241.225] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.250] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.263] CloseHandle (hObject=0x1fc) returned 1 [0241.263] CloseHandle (hObject=0x204) returned 1 [0241.264] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1pUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1puw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0241.264] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1pUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1puw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0241.264] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b3dc92, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79b3dc92, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79c48ee1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG0X1~1.0IL")) returned 0x7d3098 [0241.265] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79b3dc92, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79b3dc92, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79c48ee1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG0X1~1.0IL")) returned 0 [0241.265] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0241.265] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0241.266] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg0X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg0x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0241.267] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c48ee1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79c48ee1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79e12b6f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG1X1~1.0IL")) returned 1 [0241.267] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.267] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE15UW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce15uw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.268] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0241.268] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.268] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0241.369] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0241.369] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0241.370] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.394] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.406] CloseHandle (hObject=0x204) returned 1 [0241.406] CloseHandle (hObject=0x1fc) returned 1 [0241.406] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE15UW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce15uw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0241.407] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE15UW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce15uw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0241.407] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c48ee1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79c48ee1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79e12b6f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG1X1~1.0IL")) returned 0x7d2ad8 [0241.407] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79c48ee1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79c48ee1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79e12b6f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG1X1~1.0IL")) returned 0 [0241.407] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0241.407] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0241.409] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg1X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg1x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0241.409] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e12b6f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79e12b6f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79f1dbfb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG2X1~1.0IL")) returned 1 [0241.409] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.409] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.410] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0241.410] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.410] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0241.477] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0241.477] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0241.479] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.502] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.513] CloseHandle (hObject=0x1fc) returned 1 [0241.513] CloseHandle (hObject=0x204) returned 1 [0241.513] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0241.514] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0241.514] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e12b6f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79e12b6f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79f1dbfb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG2X1~1.0IL")) returned 0x7d3018 [0241.514] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79e12b6f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79e12b6f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79f1dbfb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG2X1~1.0IL")) returned 0 [0241.514] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0241.514] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0241.516] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg2X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg2x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0241.516] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f1dbfb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79f1dbfb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a028a40, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG3X1~1.0IL")) returned 1 [0241.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.516] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.517] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0241.517] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.521] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0241.635] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0241.635] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0241.636] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.660] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.671] CloseHandle (hObject=0x204) returned 1 [0241.671] CloseHandle (hObject=0x1fc) returned 1 [0241.672] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0241.673] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0241.673] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f1dbfb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79f1dbfb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a028a40, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG3X1~1.0IL")) returned 0x7d3018 [0241.673] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79f1dbfb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79f1dbfb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a028a40, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG3X1~1.0IL")) returned 0 [0241.673] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0241.673] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0241.709] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg3X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg3x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0241.709] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797f6b32, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x797f6b32, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79901b90, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJG4X1~1.0IL")) returned 1 [0241.710] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.710] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UTTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uttvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.712] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0241.712] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.712] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0241.868] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0241.868] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0241.869] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0241.893] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0241.905] CloseHandle (hObject=0x1fc) returned 1 [0241.905] CloseHandle (hObject=0x204) returned 1 [0241.906] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UTTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uttvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0241.906] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UTTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uttvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0241.907] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797f6b32, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x797f6b32, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79901b90, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJG4X1~1.0IL")) returned 0x7d3018 [0241.907] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x797f6b32, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x797f6b32, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79901b90, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJG4X1~1.0IL")) returned 0 [0241.907] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0241.907] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0241.908] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0241.908] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a028a40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a028a40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a1a61b9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG4X1~2.0IL")) returned 1 [0241.909] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0241.909] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5pUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5puw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0241.910] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0241.910] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0241.910] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.031] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0242.031] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.032] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.059] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.070] CloseHandle (hObject=0x204) returned 1 [0242.070] CloseHandle (hObject=0x1fc) returned 1 [0242.070] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5pUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5puw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0242.071] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE5pUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce5puw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0242.071] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a028a40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a028a40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a1a61b9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG4X1~2.0IL")) returned 0x7d29d8 [0242.071] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a028a40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a028a40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a1a61b9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG4X1~2.0IL")) returned 0 [0242.071] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0242.071] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0242.073] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg4X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg4x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pniqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0242.073] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1a61b9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a1a61b9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a3238cc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG5X1~1.0IL")) returned 1 [0242.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.073] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE55UW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce55uw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.074] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0242.074] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.074] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.141] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0242.141] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.146] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.169] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.181] CloseHandle (hObject=0x1fc) returned 1 [0242.181] CloseHandle (hObject=0x204) returned 1 [0242.181] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE55UW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce55uw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0242.182] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE55UW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce55uw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0242.182] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1a61b9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a1a61b9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a3238cc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG5X1~1.0IL")) returned 0x7d2ad8 [0242.182] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a1a61b9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7a1a61b9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7a3238cc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJG5X1~1.0IL")) returned 0 [0242.182] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0242.182] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0242.184] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mjg5X19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pNyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjg5x19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pnyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0242.184] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x796791ac, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x796791ac, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x797aa5fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGWX1~1.0IL")) returned 1 [0242.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1USTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1ustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.185] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0242.185] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.185] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.246] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.246] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0242.247] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.270] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.281] CloseHandle (hObject=0x204) returned 1 [0242.281] CloseHandle (hObject=0x1fc) returned 1 [0242.281] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1USTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1ustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0242.282] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpnd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1USTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1ustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0242.282] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x796791ac, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x796791ac, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x797aa5fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGWX1~1.0IL")) returned 0x7d3018 [0242.282] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x796791ac, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x796791ac, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x797aa5fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGWX1~1.0IL")) returned 0 [0242.282] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0242.283] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0242.284] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgwX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgwx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0242.284] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79901b90, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79901b90, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79a0cb93, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGYX1~1.0IL")) returned 1 [0242.284] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.284] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UUTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uutvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.286] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0242.286] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.287] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.384] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0242.384] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.385] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.407] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.419] CloseHandle (hObject=0x1fc) returned 1 [0242.419] CloseHandle (hObject=0x204) returned 1 [0242.420] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UUTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uutvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0242.421] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UUTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uutvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0242.421] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79901b90, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79901b90, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79a0cb93, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGYX1~1.0IL")) returned 0x7d2ad8 [0242.421] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79901b90, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79901b90, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79a0cb93, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGYX1~1.0IL")) returned 0 [0242.421] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0242.421] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0242.422] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgyX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgyx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0242.422] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a0cb93, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79a0cb93, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79b3dc92, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGZX1~1.0IL")) returned 1 [0242.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UVTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uvtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.424] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0242.424] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.424] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.489] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.489] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0242.490] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.515] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.526] CloseHandle (hObject=0x204) returned 1 [0242.526] CloseHandle (hObject=0x1fc) returned 1 [0242.526] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UVTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uvtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0242.527] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMVUU0dFNHNWdLRTVsZEcy3GNtNDIz3VJ6S1Y5cE1UVTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmvuu0dfnhnwdlrtvszecy3gntndiz3vj6s1y5ce1uvtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0242.527] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a0cb93, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79a0cb93, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79b3dc92, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGZX1~1.0IL")) returned 0x7d3018 [0242.527] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a0cb93, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x79a0cb93, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x79b3dc92, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJGZX1~1.0IL")) returned 0 [0242.527] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0242.527] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0242.529] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjgzX19D3256ZWN01W96c19DZW4sdW42cl9LUE4tSG5gKE5ldG2lcm423mRzKV9pMTU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjgzx19d3256zwn01w96c19dzw4sdw42cl9lue4tsg5gke5ldg2lcm423mrzkv9pmtu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0242.529] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737f9619, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x737f9619, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73950b72, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI0X1~1.0IL")) returned 1 [0242.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.529] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBN1VFvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbn1vfvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.530] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0242.530] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.530] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.595] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0242.595] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.596] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.620] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.631] CloseHandle (hObject=0x1fc) returned 1 [0242.631] CloseHandle (hObject=0x204) returned 1 [0242.631] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBN1VFvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbn1vfvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0242.632] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBN1VFvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbn1vfvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0242.632] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737f9619, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x737f9619, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73950b72, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI0X1~1.0IL")) returned 0x7d2918 [0242.632] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x737f9619, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x737f9619, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73950b72, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI0X1~1.0IL")) returned 0 [0242.632] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0242.632] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0242.634] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI0X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji0x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0242.634] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73950b72, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73950b72, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73a5bbc0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI1X1~1.0IL")) returned 1 [0242.634] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.634] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBN7VFvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbn7vfvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.635] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0242.635] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.635] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0242.732] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0242.732] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0242.733] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0242.918] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0242.929] CloseHandle (hObject=0x204) returned 1 [0242.929] CloseHandle (hObject=0x1fc) returned 1 [0242.930] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBN7VFvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbn7vfvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0242.931] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBN7VFvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbn7vfvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0242.931] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73950b72, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73950b72, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73a5bbc0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI1X1~1.0IL")) returned 0x7d3018 [0242.931] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73950b72, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73950b72, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73a5bbc0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI1X1~1.0IL")) returned 0 [0242.931] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0242.931] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0242.933] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI1X19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji1x19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0242.933] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a5bbc0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73a5bbc0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73b67149, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJI2X1~1.0IL")) returned 1 [0242.933] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0242.933] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRXB2Y21SMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrxb2y21smjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0242.934] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0242.934] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0242.934] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.035] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0243.039] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0243.040] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.063] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.074] CloseHandle (hObject=0x1fc) returned 1 [0243.074] CloseHandle (hObject=0x204) returned 1 [0243.074] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRXB2Y21SMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrxb2y21smjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0243.075] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRXB2Y21SMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrxb2y21smjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0243.075] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a5bbc0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73a5bbc0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73b67149, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJI2X1~1.0IL")) returned 0x7d2cd8 [0243.075] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73a5bbc0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73a5bbc0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73b67149, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJI2X1~1.0IL")) returned 0 [0243.075] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0243.075] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0243.077] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI2X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji2x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0243.077] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b67149, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73b67149, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73c71c8d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJI3X1~1.0IL")) returned 1 [0243.077] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.077] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWM1c1cFlXZ2dLRXB2Y21SMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwm1c1cflxz2dlrxb2y21smjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.078] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x280 [0243.078] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.078] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.144] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x280, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x280, lpOverlapped=0x0) returned 1 [0243.145] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0243.146] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.169] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.180] CloseHandle (hObject=0x204) returned 1 [0243.180] CloseHandle (hObject=0x1fc) returned 1 [0243.180] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWM1c1cFlXZ2dLRXB2Y21SMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwm1c1cflxz2dlrxb2y21smjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0243.181] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWM1c1cFlXZ2dLRXB2Y21SMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwm1c1cflxz2dlrxb2y21smjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0243.181] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b67149, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73b67149, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73c71c8d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJI3X1~1.0IL")) returned 0x7d2998 [0243.181] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73b67149, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73b67149, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73c71c8d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJI3X1~1.0IL")) returned 0 [0243.181] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0243.182] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0243.183] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI3X19D3256ZWN01W96c19DZW4sdW42cl9V3W5pYWggKEpvcmR23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji3x19d3256zwn01w96c19dzw4sdw42cl9v3w5pywggkepvcmr23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0243.183] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73cee76a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73cee76a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73f6cbe0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJI4X1~2.0IL")) returned 1 [0243.183] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5szM0o1WVc0cFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5szm0o1wvc0cfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.184] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0243.184] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.184] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.284] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0243.284] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0243.285] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.308] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.320] CloseHandle (hObject=0x1fc) returned 1 [0243.320] CloseHandle (hObject=0x204) returned 1 [0243.320] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5szM0o1WVc0cFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5szm0o1wvc0cfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0243.321] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5szM0o1WVc0cFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5szm0o1wvc0cfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0243.321] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73cee76a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73cee76a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73f6cbe0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJI4X1~2.0IL")) returned 0x7d29d8 [0243.322] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73cee76a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73cee76a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73f6cbe0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJI4X1~2.0IL")) returned 0 [0243.322] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0243.322] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0243.323] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0243.323] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7348bb9b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7348bb9b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73597089, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI4X1~1.0IL")) returned 1 [0243.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVd5cFEyVnNJQzJLWVc4MjFXTjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvd5cfeyvnnjqzjlwvc4mjfxtjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.324] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0243.325] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.325] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.390] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0243.390] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0243.391] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.415] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.426] CloseHandle (hObject=0x204) returned 1 [0243.427] CloseHandle (hObject=0x1fc) returned 1 [0243.427] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVd5cFEyVnNJQzJLWVc4MjFXTjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvd5cfeyvnnjqzjlwvc4mjfxtjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0243.428] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVd5cFEyVnNJQzJLWVc4MjFXTjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvd5cfeyvnnjqzjlwvc4mjfxtjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0243.428] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7348bb9b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7348bb9b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73597089, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI4X1~1.0IL")) returned 0x7d2c98 [0243.428] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7348bb9b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7348bb9b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x73597089, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJI4X1~1.0IL")) returned 0 [0243.428] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0243.428] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0243.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI4X19D3256ZWN01W96c19DZW4sdW42cl9E1WdpQ2VsIC2KYW121WN2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji4x19d3256zwn01w96c19dzw4sdw42cl9e1wdpq2vsic2kyw121wn2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0243.430] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f6cbe0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73f6cbe0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7415c849, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJI5X1~1.0IL")) returned 1 [0243.430] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.430] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5szM0o1WVc0cFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5szm0o1wvc0cfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.431] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0243.431] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.432] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.497] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0243.498] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0243.499] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.522] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.533] CloseHandle (hObject=0x1fc) returned 1 [0243.534] CloseHandle (hObject=0x204) returned 1 [0243.534] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5szM0o1WVc0cFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5szm0o1wvc0cfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0243.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM5szM0o1WVc0cFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm5szm0o1wvc0cfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0243.535] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f6cbe0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73f6cbe0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7415c849, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJI5X1~1.0IL")) returned 0x7d2c58 [0243.535] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f6cbe0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73f6cbe0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7415c849, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJI5X1~1.0IL")) returned 0 [0243.535] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0243.535] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0243.537] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjI5X19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2K33J5YW4pX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mji5x19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2k33j5yw4px254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0243.537] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7321b00a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7321b00a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7348bb9b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJIWX1~1.0IL")) returned 1 [0243.537] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.537] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWVdKc1pTQjIz3VFnVjJs7VpXNG4jM01nS0VwMjNXRnBZM5VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewvdkc1ptqjiz3vfnvjjs7vpxng4jm01ns0vwmjnxrnbzm5vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.538] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x200 [0243.538] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.538] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.638] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0243.638] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x210, lpOverlapped=0x0) returned 1 [0243.639] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.665] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.676] CloseHandle (hObject=0x204) returned 1 [0243.676] CloseHandle (hObject=0x1fc) returned 1 [0243.676] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWVdKc1pTQjIz3VFnVjJs7VpXNG4jM01nS0VwMjNXRnBZM5VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewvdkc1ptqjiz3vfnvjjs7vpxng4jm01ns0vwmjnxrnbzm5vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0243.677] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWVdKc1pTQjIz3VFnVjJs7VpXNG4jM01nS0VwMjNXRnBZM5VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewvdkc1ptqjiz3vfnvjjs7vpxng4jm01ns0vwmjnxrnbzm5vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0243.677] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7321b00a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7321b00a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7348bb9b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJIWX1~1.0IL")) returned 0x7d2a18 [0243.678] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7321b00a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7321b00a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7348bb9b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJIWX1~1.0IL")) returned 0 [0243.678] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0243.678] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0243.679] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKEp23WFpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkep23wfpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0243.679] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73597089, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73597089, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x736a20fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJIYX1~1.0IL")) returned 1 [0243.680] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.680] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.681] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0243.681] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.681] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.749] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0243.749] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0243.750] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.775] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.795] CloseHandle (hObject=0x1fc) returned 1 [0243.795] CloseHandle (hObject=0x204) returned 1 [0243.795] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0243.796] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0243.796] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73597089, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73597089, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x736a20fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJIYX1~1.0IL")) returned 0x7d2a18 [0243.796] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73597089, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x73597089, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x736a20fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJIYX1~1.0IL")) returned 0 [0243.796] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0243.796] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0243.798] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIyX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjiyx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0243.798] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x736c8280, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x736c8280, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x737acfee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJIZX1~1.0IL")) returned 1 [0243.798] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.798] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.799] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0243.799] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.800] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0243.867] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0243.867] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0243.868] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0243.891] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0243.904] CloseHandle (hObject=0x204) returned 1 [0243.904] CloseHandle (hObject=0x1fc) returned 1 [0243.904] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0243.905] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMzBOdlRXOGdLRXAyY0dGN5tWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmzbodlrxogdlrxayy0dgn5twoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0243.905] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x736c8280, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x736c8280, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x737acfee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJIZX1~1.0IL")) returned 0x7d2c58 [0243.905] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x736c8280, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x736c8280, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x737acfee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJIZX1~1.0IL")) returned 0 [0243.905] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0243.905] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0243.907] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjIzX19D3256ZWN01W96c19DZW4sdW42cl9E30NvTW8gKEp2cGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjizx19d3256zwn01w96c19dzw4sdw42cl9e30nvtw8gkep2cgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0243.907] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7415c849, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7415c849, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x743e5293, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJJFX0~1.0IL")) returned 1 [0243.907] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0243.907] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRJNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrjnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0243.908] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x380 [0243.908] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0243.908] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.069] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x380, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0244.069] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0244.070] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.100] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.111] CloseHandle (hObject=0x1fc) returned 1 [0244.111] CloseHandle (hObject=0x204) returned 1 [0244.111] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRJNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrjnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0244.112] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM02OMGNtRWdLRUY4YzNS7VlXNHBZU24mMVRJNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm02omgntrwdlruy4yzns7vlxnhbzu24mmvrjnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0244.112] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7415c849, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7415c849, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x743e5293, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJJFX0~1.0IL")) returned 0x7d2d58 [0244.113] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7415c849, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7415c849, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x743e5293, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJJFX0~1.0IL")) returned 0 [0244.113] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0244.113] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0244.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3HN0cmEgKEF1c3RyYW4pYSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjjfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3hn0cmegkef1c3ryyw4pyslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0244.114] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2a314d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b2a314d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b387dd7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJLFX0~1.0IL")) returned 1 [0244.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpsZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM0dVNmNt3DZ17UFvUV2W7mRISnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm0dvnmnt3dz17ufvuv2w7mrisnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.116] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0244.116] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.116] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.182] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0244.183] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0244.184] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.206] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.218] CloseHandle (hObject=0x204) returned 1 [0244.218] CloseHandle (hObject=0x1fc) returned 1 [0244.218] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpsZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM0dVNmNt3DZ17UFvUV2W7mRISnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm0dvnmnt3dz17ufvuv2w7mrisnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0244.219] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpsZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVJsM0dVNmNt3DZ17UFvUV2W7mRISnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvjsm0dvnmnt3dz17ufvuv2w7mrisnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0244.219] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2a314d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b2a314d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b387dd7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJLFX0~1.0IL")) returned 0x7d2cd8 [0244.219] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b2a314d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b2a314d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b387dd7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJLFX0~1.0IL")) returned 0 [0244.219] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0244.219] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0244.221] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1Rl3GU6cml6ZyAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjlfx0nv3m5ly3rp325zx0nl3g413gfyx1rl3gu6cml6zyaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0244.221] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a011d4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74a011d4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74b0c42c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJM0X1~1.0IL")) returned 1 [0244.221] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.221] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMV2S3ElFNDJ5SFpwMW1FZ0tFNDJ5SFpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmv2s3elfndj5sfpwmw1fz0tfndj5sfpwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.222] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0244.222] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.223] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.303] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0244.303] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0244.304] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.327] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.341] CloseHandle (hObject=0x1fc) returned 1 [0244.341] CloseHandle (hObject=0x204) returned 1 [0244.341] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMV2S3ElFNDJ5SFpwMW1FZ0tFNDJ5SFpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmv2s3elfndj5sfpwmw1fz0tfndj5sfpwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0244.342] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMV2S3ElFNDJ5SFpwMW1FZ0tFNDJ5SFpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmv2s3elfndj5sfpwmw1fz0tfndj5sfpwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0244.342] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a011d4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74a011d4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74b0c42c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJM0X1~1.0IL")) returned 0x7d2ad8 [0244.343] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74a011d4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74a011d4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74b0c42c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJM0X1~1.0IL")) returned 0 [0244.343] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0244.343] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0244.344] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM0X19D3256ZWN01W96c19DZW4sdW42cl9C1XRlIE42dHZp1mEgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm0x19d3256zwn01w96c19dzw4sdw42cl9c1xrlie42dhzp1megke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0244.344] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74b0c42c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74b0c42c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74c89abe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJM1X1~1.0IL")) returned 1 [0244.345] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.345] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlNVFZRZ0tFNDJ5SFpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlnvfzrz0tfndj5sfpwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.345] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x390 [0244.346] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.346] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.442] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0244.442] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3a0, lpOverlapped=0x0) returned 1 [0244.443] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.466] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.482] CloseHandle (hObject=0x204) returned 1 [0244.482] CloseHandle (hObject=0x1fc) returned 1 [0244.482] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlNVFZRZ0tFNDJ5SFpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlnvfzrz0tfndj5sfpwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0244.483] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlNVFZRZ0tFNDJ5SFpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlnvfzrz0tfndj5sfpwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0244.483] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74b0c42c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74b0c42c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74c89abe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJM1X1~1.0IL")) returned 0x7d3018 [0244.484] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74b0c42c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74b0c42c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74c89abe, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJM1X1~1.0IL")) returned 0 [0244.484] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0244.484] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0244.485] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM1X19D3256ZWN01W96c19DZW4sdW42cl9MTVQgKE42dHZpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm1x19d3256zwn01w96c19dzw4sdw42cl9mtvqgke42dhzpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0244.485] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cafc14, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74cafc14, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74e798e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM2X1~1.0IL")) returned 1 [0244.485] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.486] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR0YwZG1sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur0ywzg1sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.486] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0244.486] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.487] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.553] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0244.554] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0244.555] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.579] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.590] CloseHandle (hObject=0x1fc) returned 1 [0244.590] CloseHandle (hObject=0x204) returned 1 [0244.591] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR0YwZG1sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur0ywzg1sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0244.591] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR0YwZG1sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur0ywzg1sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0244.592] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cafc14, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74cafc14, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74e798e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM2X1~1.0IL")) returned 0x7d2b58 [0244.592] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74cafc14, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74cafc14, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74e798e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM2X1~1.0IL")) returned 0 [0244.592] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0244.592] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0244.593] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0244.593] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e9fbf7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74e9fbf7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74fd0e78, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM3X1~1.0IL")) returned 1 [0244.594] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.594] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR0YwZG1sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur0ywzg1sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.595] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0244.595] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.595] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.692] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0244.692] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0244.693] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.716] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.728] CloseHandle (hObject=0x204) returned 1 [0244.728] CloseHandle (hObject=0x1fc) returned 1 [0244.728] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR0YwZG1sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur0ywzg1sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0244.729] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR0YwZG1sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur0ywzg1sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0244.729] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e9fbf7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74e9fbf7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74fd0e78, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM3X1~1.0IL")) returned 0x7d3098 [0244.729] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74e9fbf7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74e9fbf7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x74fd0e78, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM3X1~1.0IL")) returned 0 [0244.729] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0244.729] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0244.731] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGF0dml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgf0dml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0244.731] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fd0e78, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74fd0e78, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x751748af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM4X1~2.0IL")) returned 1 [0244.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0d1M5lDM511V0oyM205N5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0d1m5ldm511v0oym205n5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.732] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0244.732] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.732] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.808] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0244.808] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0244.809] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.832] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.843] CloseHandle (hObject=0x1fc) returned 1 [0244.844] CloseHandle (hObject=0x204) returned 1 [0244.844] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0d1M5lDM511V0oyM205N5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0d1m5ldm511v0oym205n5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0244.845] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0d1M5lDM511V0oyM205N5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0d1m5ldm511v0oym205n5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0244.845] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fd0e78, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74fd0e78, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x751748af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM4X1~2.0IL")) returned 0x7d3018 [0244.845] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fd0e78, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x74fd0e78, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x751748af, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM4X1~2.0IL")) returned 0 [0244.845] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0244.845] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0244.847] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9B3GZ2IC2MZWJ23m96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9b3gz2ic2mzwj23m96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0244.847] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745165ae, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x745165ae, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7475261d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM4X1~1.0IL")) returned 1 [0244.847] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0244.848] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMV5VZZ1NGT5VVRUVnU1c1MFpYSjZ1WFFnS0V0dmNtVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmv5vzz1ngt5vvruvnu1c1mfpysjz1wffns0v0dmntvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0244.849] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b0 [0244.849] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0244.849] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0244.915] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0244.915] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0244.916] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0244.941] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.000] CloseHandle (hObject=0x204) returned 1 [0245.001] CloseHandle (hObject=0x1fc) returned 1 [0245.001] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMV5VZZ1NGT5VVRUVnU1c1MFpYSjZ1WFFnS0V0dmNtVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmv5vzz1ngt5vvruvnu1c1mfpysjz1wffns0v0dmntvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0245.002] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMV5VZZ1NGT5VVRUVnU1c1MFpYSjZ1WFFnS0V0dmNtVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmv5vzz1ngt5vvruvnu1c1mfpysjz1wffns0v0dmntvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0245.002] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745165ae, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x745165ae, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7475261d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM4X1~1.0IL")) returned 0x7d2d58 [0245.002] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x745165ae, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x745165ae, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7475261d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJM4X1~1.0IL")) returned 0 [0245.002] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0245.002] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0245.004] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM4X19D3256ZWN01W96c19DZW4sdW42cl9LVEYgSFNEUEEgSW50ZXJ6ZXQgKEtvcmV2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm4x19d3256zwn01w96c19dzw4sdw42cl9lveygsfneueegsw50zxj6zxqgketvcmv2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0245.004] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751748af, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x751748af, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x754493b7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJM5X1~1.0IL")) returned 1 [0245.004] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.004] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5VNZ1ZHOTFZMmdnS0U03FltRjYzMjRwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5vnz1zhotfzmmdns0u03fltrjyzmjrwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.005] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0245.005] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.005] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.070] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0245.070] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0245.071] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.094] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.105] CloseHandle (hObject=0x1fc) returned 1 [0245.105] CloseHandle (hObject=0x204) returned 1 [0245.106] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5VNZ1ZHOTFZMmdnS0U03FltRjYzMjRwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5vnz1zhotfzmmdns0u03fltrjyzmjrwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0245.106] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5VNZ1ZHOTFZMmdnS0U03FltRjYzMjRwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5vnz1zhotfzmmdns0u03fltrjyzmjrwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0245.107] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751748af, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x751748af, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x754493b7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJM5X1~1.0IL")) returned 0x7d2998 [0245.107] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x751748af, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x751748af, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x754493b7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJM5X1~1.0IL")) returned 0 [0245.107] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0245.107] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0245.108] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjM5X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgVG91Y2ggKE4lYmF6324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjm5x19d3256zwn01w96c19dzw4sdw42cl9nvemgvg91y2ggke4lymf6324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0245.108] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743e5293, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x743e5293, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x745165ae, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJMWX1~1.0IL")) returned 1 [0245.109] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.109] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUWVd1MmNt3GozMjBnS0V03DN63DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluwvd1mmnt3gozmjbns0v03dn63djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.110] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0245.110] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.110] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.198] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0245.198] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0245.199] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.221] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.234] CloseHandle (hObject=0x204) returned 1 [0245.234] CloseHandle (hObject=0x1fc) returned 1 [0245.235] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUWVd1MmNt3GozMjBnS0V03DN63DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluwvd1mmnt3gozmjbns0v03dn63djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0245.236] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpNd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUWVd1MmNt3GozMjBnS0V03DN63DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluwvd1mmnt3gozmjbns0v03dn63djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0245.236] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743e5293, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x743e5293, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x745165ae, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJMWX1~1.0IL")) returned 0x7d3018 [0245.236] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x743e5293, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x743e5293, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x745165ae, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJMWX1~1.0IL")) returned 0 [0245.236] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0245.236] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0245.237] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMwX19D3256ZWN01W96c19DZW4sdW42cl9TYWZ2cmlj320gKEtl3nl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmwx19d3256zwn01w96c19dzw4sdw42cl9tywz2cmlj320gketl3nl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0245.237] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7475261d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7475261d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x748838ea, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJMYX1~1.0IL")) returned 1 [0245.238] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.238] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpN7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYWV2SMjNt3DVZU0FvUzNWM1lX3DBLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlywv2smjnt3dvzu0fvuznwm1lx3dblvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.239] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0245.239] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.239] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.336] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0245.336] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0245.337] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.360] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.373] CloseHandle (hObject=0x1fc) returned 1 [0245.374] CloseHandle (hObject=0x204) returned 1 [0245.374] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpN7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYWV2SMjNt3DVZU0FvUzNWM1lX3DBLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlywv2smjnt3dvzu0fvuznwm1lx3dblvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0245.375] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpN7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYWV2SMjNt3DVZU0FvUzNWM1lX3DBLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlywv2smjnt3dvzu0fvuznwm1lx3dblvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0245.375] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7475261d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7475261d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x748838ea, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJMYX1~1.0IL")) returned 0x7d2ad8 [0245.375] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7475261d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7475261d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x748838ea, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJMYX1~1.0IL")) returned 0 [0245.375] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0245.375] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0245.377] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMyX19D3256ZWN01W96c19DZW4sdW42cl9XYXR23ml5YSAoS3V3YWl0KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmyx19d3256zwn01w96c19dzw4sdw42cl9xyxr23ml5ysaos3v3ywl0kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0245.377] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748838ea, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x748838ea, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x749dae90, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJMZX1~1.0IL")) returned 1 [0245.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.377] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpN7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM545WGQyMV2RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm545wgqymv2rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.378] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0245.378] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.378] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.443] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0245.443] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0245.444] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.469] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.480] CloseHandle (hObject=0x204) returned 1 [0245.480] CloseHandle (hObject=0x1fc) returned 1 [0245.481] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpN7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM545WGQyMV2RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm545wgqymv2rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0245.482] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpN7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D54WVdsN5lDM545WGQyMV2RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d54wvdsn5ldm545wgqymv2rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0245.482] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748838ea, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x748838ea, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x749dae90, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJMZX1~1.0IL")) returned 0x7d3018 [0245.482] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x748838ea, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x748838ea, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x749dae90, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJMZX1~1.0IL")) returned 0 [0245.482] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0245.482] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0245.483] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjMzX19D3256ZWN01W96c19DZW4sdW42cl91YWl6IC2LdXd21XQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjmzx19d3256zwn01w96c19dzw4sdw42cl91ywl6ic2ldxd21xqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0245.484] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546f555, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7546f555, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7557b626, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJNFX0~1.0IL")) returned 1 [0245.484] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.484] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpOZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVp2W5dG3TMyNW4JRUZWSUMyQmRYTjBj3UZzMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpozlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvp2w5dg3tmynw4jruzwsumyqmrytjbj3uzzmvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.485] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0245.485] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.485] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.551] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0245.552] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0245.553] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.576] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.587] CloseHandle (hObject=0x1fc) returned 1 [0245.587] CloseHandle (hObject=0x204) returned 1 [0245.587] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpOZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVp2W5dG3TMyNW4JRUZWSUMyQmRYTjBj3UZzMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpozlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvp2w5dg3tmynw4jruzwsumyqmrytjbj3uzzmvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0245.588] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpOZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVp2W5dG3TMyNW4JRUZWSUMyQmRYTjBj3UZzMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpozlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvp2w5dg3tmynw4jruzwsumyqmrytjbj3uzzmvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0245.588] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546f555, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7546f555, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7557b626, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJNFX0~1.0IL")) returned 0x7d2998 [0245.588] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7546f555, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7546f555, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7557b626, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJNFX0~1.0IL")) returned 0 [0245.588] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0245.588] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0245.590] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZvZGFm325lIEFVIC2BdXN0cmFs1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjnfx0nv3m5ly3rp325zx0nl3g413gfyx1zvzgfm325liefvic2bdxn0cmfs1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0245.590] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7599ee98, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7599ee98, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75b8ecee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQ0X1~1.0IL")) returned 1 [0245.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.590] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQM1c1cGRHVnNJQzJNMV2S32RXRjY4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqm1c1cgrhvnnjqzjnmv2s32rxrjy4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.591] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0245.591] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.591] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.691] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0245.691] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0245.692] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.716] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.727] CloseHandle (hObject=0x204) returned 1 [0245.727] CloseHandle (hObject=0x1fc) returned 1 [0245.727] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQM1c1cGRHVnNJQzJNMV2S32RXRjY4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqm1c1cgrhvnnjqzjnmv2s32rxrjy4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0245.728] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQM1c1cGRHVnNJQzJNMV2S32RXRjY4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqm1c1cgrhvnnjqzjnmv2s32rxrjy4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0245.728] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7599ee98, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7599ee98, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75b8ecee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQ0X1~1.0IL")) returned 0x7d2ad8 [0245.728] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7599ee98, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7599ee98, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75b8ecee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQ0X1~1.0IL")) returned 0 [0245.728] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0245.728] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0245.730] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ0X19D3256ZWN01W96c19DZW4sdW42cl9P3W5pdGVsIC2M1XRodWF61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq0x19d3256zwn01w96c19dzw4sdw42cl9p3w5pdgvsic2m1xrodwf61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0245.730] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bb4f4b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75bb4f4b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75d0c4a6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJQ1X1~1.0IL")) returned 1 [0245.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.731] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR2wwMU2WMjNt3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur2wwmu2wmjnt3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.732] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0245.732] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.732] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.806] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0245.806] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0245.807] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.830] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0245.841] CloseHandle (hObject=0x1fc) returned 1 [0245.841] CloseHandle (hObject=0x204) returned 1 [0245.841] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR2wwMU2WMjNt3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur2wwmu2wmjnt3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0245.842] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR2wwMU2WMjNt3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur2wwmu2wmjnt3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0245.842] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bb4f4b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75bb4f4b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75d0c4a6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJQ1X1~1.0IL")) returned 0x7d2998 [0245.842] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75bb4f4b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75bb4f4b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75d0c4a6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJQ1X1~1.0IL")) returned 0 [0245.842] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0245.842] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0245.844] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0245.844] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d0c4a6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75d0c4a6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75e17529, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJQ2X1~1.0IL")) returned 1 [0245.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0245.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR2wwMU2WMjNt3DJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur2wwmu2wmjnt3djlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0245.857] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0245.857] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0245.857] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0245.922] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0245.922] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0245.923] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0245.995] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.006] CloseHandle (hObject=0x204) returned 1 [0246.006] CloseHandle (hObject=0x1fc) returned 1 [0246.007] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR2wwMU2WMjNt3DJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur2wwmu2wmjnt3djlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0246.007] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9UR2wwMU2WMjNt3DJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9ur2wwmu2wmjnt3djlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0246.008] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d0c4a6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75d0c4a6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75e17529, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJQ2X1~1.0IL")) returned 0x7d2b18 [0246.008] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75d0c4a6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75d0c4a6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75e17529, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJQ2X1~1.0IL")) returned 0 [0246.008] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0246.008] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0246.009] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoTGl01HV23ml2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaotgl01hv23ml2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0246.009] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e3d4e1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75e3d4e1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75f6e972, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ3X1~1.0IL")) returned 1 [0246.010] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.010] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWVc13jN5QW9USFY0Wlc41TMzVnl17W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwvc13jn5qw9usfy0wlc41tmzvnl17w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.010] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0246.010] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.011] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.075] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0246.075] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0246.076] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.100] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.111] CloseHandle (hObject=0x1fc) returned 1 [0246.111] CloseHandle (hObject=0x204) returned 1 [0246.112] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWVc13jN5QW9USFY0Wlc41TMzVnl17W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwvc13jn5qw9usfy0wlc41tmzvnl17w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0246.112] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWVc13jN5QW9USFY0Wlc41TMzVnl17W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwvc13jn5qw9usfy0wlc41tmzvnl17w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0246.112] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e3d4e1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75e3d4e1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75f6e972, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ3X1~1.0IL")) returned 0x7d3018 [0246.113] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75e3d4e1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75e3d4e1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75f6e972, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ3X1~1.0IL")) returned 0 [0246.113] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0246.113] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0246.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ3X19D3256ZWN01W96c19DZW4sdW42cl9UYW5n3yAoTHV4ZW1i33VyZylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq3x19d3256zwn01w96c19dzw4sdw42cl9uyw5n3yaothv4zw1i33vyzylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0246.114] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75690f27, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75690f27, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75788d1d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ4X1~1.0IL")) returned 1 [0246.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.115] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlNMVdKNVlXNTJJQzJNMVdKNVlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlnmvdknvlxntjjqzjnmvdknvlt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.116] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0246.116] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.116] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.182] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0246.183] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0246.184] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.206] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.217] CloseHandle (hObject=0x204) returned 1 [0246.218] CloseHandle (hObject=0x1fc) returned 1 [0246.218] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlNMVdKNVlXNTJJQzJNMVdKNVlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlnmvdknvlxntjjqzjnmvdknvlt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0246.219] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlNMVdKNVlXNTJJQzJNMVdKNVlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlnmvdknvlxntjjqzjnmvdknvlt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0246.219] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75690f27, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75690f27, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75788d1d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ4X1~1.0IL")) returned 0x7d2ad8 [0246.219] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75690f27, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75690f27, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x75788d1d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ4X1~1.0IL")) returned 0 [0246.219] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0246.219] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0246.220] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9M1WJ5YW52IC2M1WJ5YSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9m1wj5yw52ic2m1wj5yslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0246.221] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f6e972, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75f6e972, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x760c5f47, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQ4X1~2.0IL")) returned 1 [0246.221] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.221] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRTQ4N0dWdFltOTFj3WNwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrtq4n0dwdfltotfj3wnwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.222] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0246.222] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.222] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.366] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0246.366] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0246.367] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.389] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.402] CloseHandle (hObject=0x1fc) returned 1 [0246.402] CloseHandle (hObject=0x204) returned 1 [0246.402] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRTQ4N0dWdFltOTFj3WNwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrtq4n0dwdfltotfj3wnwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0246.403] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRTQ4N0dWdFltOTFj3WNwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrtq4n0dwdfltotfj3wnwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0246.403] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f6e972, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75f6e972, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x760c5f47, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQ4X1~2.0IL")) returned 0x7d2a58 [0246.403] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75f6e972, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75f6e972, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x760c5f47, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQ4X1~2.0IL")) returned 0 [0246.404] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0246.404] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0246.405] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKE417GVtYm91cmcpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugke417gvtym91cmcpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0246.405] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760c5f47, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x760c5f47, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x761d0fb2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ5X1~1.0IL")) returned 1 [0246.405] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.406] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEV5UwZ0tFMTJZM5Z2SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlev5uwz0tfmtjzm5z2suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.406] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0246.406] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.407] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.471] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0246.471] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0246.472] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.496] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.506] CloseHandle (hObject=0x204) returned 1 [0246.506] CloseHandle (hObject=0x1fc) returned 1 [0246.507] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEV5UwZ0tFMTJZM5Z2SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlev5uwz0tfmtjzm5z2suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0246.507] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEV5UwZ0tFMTJZM5Z2SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlev5uwz0tfmtjzm5z2suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0246.508] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760c5f47, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x760c5f47, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x761d0fb2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ5X1~1.0IL")) returned 0x7d2a18 [0246.508] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760c5f47, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x760c5f47, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x761d0fb2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQ5X1~1.0IL")) returned 0 [0246.508] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0246.508] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0246.509] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQ5X19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjq5x19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0246.509] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7557b626, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7557b626, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7568866b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQWX1~1.0IL")) returned 1 [0246.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.510] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMl5yOXRJRTRsYzI5MDFHOGdLRTRsYzI5MDFHOHBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsml5yoxrjrtrsyzi5mdfhogdlrtrsyzi5mdfhohbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.511] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0246.511] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.511] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.576] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0246.576] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0246.577] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.601] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.612] CloseHandle (hObject=0x1fc) returned 1 [0246.612] CloseHandle (hObject=0x204) returned 1 [0246.612] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMl5yOXRJRTRsYzI5MDFHOGdLRTRsYzI5MDFHOHBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsml5yoxrjrtrsyzi5mdfhogdlrtrsyzi5mdfhohbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0246.613] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpRd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMl5yOXRJRTRsYzI5MDFHOGdLRTRsYzI5MDFHOHBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twprd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsml5yoxrjrtrsyzi5mdfhogdlrtrsyzi5mdfhohbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0246.613] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7557b626, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7557b626, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7568866b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQWX1~1.0IL")) returned 0x7d3098 [0246.613] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7557b626, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7557b626, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7568866b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJQWX1~1.0IL")) returned 0 [0246.613] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0246.613] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0246.615] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Y29tIE4lc2901G8gKE4lc2901G8pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqwx19d3256zwn01w96c19dzw4sdw42cl9w32r2y29tie4lc2901g8gke4lc2901g8px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0246.615] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75788d1d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75788d1d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7597894f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQYX1~1.0IL")) returned 1 [0246.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.615] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpR7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCTVNCTjMySnAzR3R2M1NB31RH3G4ZMjIwWlc17mRHVnAz1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpr7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlctvnctjmysnazr3r2m1nb31rh3g4zmjiwwlc17mrhvnaz1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.616] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0246.616] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.616] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.711] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0246.711] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0246.712] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.735] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.746] CloseHandle (hObject=0x204) returned 1 [0246.746] CloseHandle (hObject=0x1fc) returned 1 [0246.746] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpR7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCTVNCTjMySnAzR3R2M1NB31RH3G4ZMjIwWlc17mRHVnAz1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpr7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlctvnctjmysnazr3r2m1nb31rh3g4zmjiwwlc17mrhvnaz1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0246.747] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpR7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCTVNCTjMySnAzR3R2M1NB31RH3G4ZMjIwWlc17mRHVnAz1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpr7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlctvnctjmysnazr3r2m1nb31rh3g4zmjiwwlc17mrhvnaz1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0246.747] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75788d1d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75788d1d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7597894f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQYX1~1.0IL")) returned 0x7d3018 [0246.747] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75788d1d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x75788d1d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7597894f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJQYX1~1.0IL")) returned 0 [0246.747] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0246.747] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0246.749] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjQyX19D3256ZWN01W96c19DZW4sdW42cl9BMSBN32Jp3Gtv3SAoTGllY220ZW5zdGVp3ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjqyx19d3256zwn01w96c19dzw4sdw42cl9bmsbn32jp3gtv3saotglly220zw5zdgvp3ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0246.749] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0fb2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x761d0fb2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x763020a6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJRFX0~1.0IL")) returned 1 [0246.749] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.749] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpSZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFXTmozM1Y2ZEVWNGNHVn54V1Y2WTJWVlU1dzZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpszlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfxtmozm1y2zevwngnhvn54v1y2wtjwvlu1dzzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.750] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0246.750] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.751] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.837] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0246.837] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0246.838] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0246.864] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0246.875] CloseHandle (hObject=0x1fc) returned 1 [0246.875] CloseHandle (hObject=0x204) returned 1 [0246.876] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpSZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFXTmozM1Y2ZEVWNGNHVn54V1Y2WTJWVlU1dzZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpszlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfxtmozm1y2zevwngnhvn54v1y2wtjwvlu1dzzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0246.877] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpSZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFXTmozM1Y2ZEVWNGNHVn54V1Y2WTJWVlU1dzZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpszlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfxtmozm1y2zevwngnhvn54v1y2wtjwvlu1dzzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0246.877] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0fb2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x761d0fb2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x763020a6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJRFX0~1.0IL")) returned 0x7d29d8 [0246.877] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761d0fb2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x761d0fb2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x763020a6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJRFX0~1.0IL")) returned 0 [0246.877] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0246.877] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 1 [0246.879] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjRfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjrfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0246.879] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7685f595, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7685f595, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76990a60, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU0X1~1.0IL")) returned 1 [0246.879] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.880] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMV2BZ1QzQm4j3UYwMzNJZ0tGSm4jSFZpM0ds15lHOW1JRTEyWTJWNTMyNXBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmv2bz1qzqm4j3uywmznjz0tgsm4jsfzpm0ds15lhow1jrteywtjwntmynxbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0246.880] CloseHandle (hObject=0x204) returned 1 [0246.880] CloseHandle (hObject=0xffffffff) returned 1 [0246.880] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMV2BZ1QzQm4j3UYwMzNJZ0tGSm4jSFZpM0ds15lHOW1JRTEyWTJWNTMyNXBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmv2bz1qzqm4j3uywmznjz0tgsm4jsfzpm0ds15lhow1jrteywtjwntmynxbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0246.880] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMV2BZ1QzQm4j3UYwMzNJZ0tGSm4jSFZpM0ds15lHOW1JRTEyWTJWNTMyNXBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmv2bz1qzqm4j3uywmznjz0tgsm4jsfzpm0ds15lhow1jrteywtjwntmynxbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0246.880] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7685f595, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7685f595, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76990a60, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU0X1~1.0IL")) returned 0x7d2a58 [0246.880] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7685f595, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7685f595, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76990a60, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU0X1~1.0IL")) returned 0 [0246.880] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0246.880] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0246.882] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU0X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgT3BlcmF033IgKFJlcHVi3GljIG9mIE12Y2V5325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju0x19d3256zwn01w96c19dzw4sdw42cl9w1xagt3blcmf033igkfjlchvi3gljig9mie12y2v5325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0246.882] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a02f28, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76a02f28, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76b0e219, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x300056, dwReserved1=0x510046, cFileName="MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU1X1~1.0IL")) returned 1 [0246.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0246.882] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0246.883] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0246.883] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0246.883] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0246.993] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0246.993] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0246.994] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.017] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.028] CloseHandle (hObject=0x204) returned 1 [0247.028] CloseHandle (hObject=0x1fc) returned 1 [0247.028] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0247.029] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0247.029] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a02f28, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76a02f28, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76b0e219, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU1X1~1.0IL")) returned 0x7d2c18 [0247.029] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76a02f28, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76a02f28, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76b0e219, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU1X1~1.0IL")) returned 0 [0247.029] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0247.029] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0247.031] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU1X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju1x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0247.031] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76b0e219, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76b0e219, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76c19278, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJU2X1~1.0IL")) returned 1 [0247.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.031] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc01jMyMGdUV0ZzWV2s7jFXRWdLRTEyM0dGNWMy3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc01jmymgduv0zzwv2s7jfxrwdlrteym0dgnwmy3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.032] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0247.032] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.032] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.097] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0247.097] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0247.098] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.121] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.132] CloseHandle (hObject=0x1fc) returned 1 [0247.133] CloseHandle (hObject=0x204) returned 1 [0247.133] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc01jMyMGdUV0ZzWV2s7jFXRWdLRTEyM0dGNWMy3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc01jmymgduv0zzwv2s7jfxrwdlrteym0dgnwmy3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0247.134] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc01jMyMGdUV0ZzWV2s7jFXRWdLRTEyM0dGNWMy3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc01jmymgduv0zzwv2s7jfxrwdlrteym0dgnwmy3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0247.134] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76b0e219, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76b0e219, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76c19278, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJU2X1~1.0IL")) returned 0x7d3018 [0247.134] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76b0e219, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76b0e219, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76c19278, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJU2X1~1.0IL")) returned 0 [0247.134] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0247.134] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0247.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU2X19D3256ZWN01W96c19DZW4sdW42cl9DZW4j320gTWFsYXlz1WEgKE123GF5c2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju2x19d3256zwn01w96c19dzw4sdw42cl9dzw4j320gtwfsyxlz1wegke123gf5c2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0247.135] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c3f553, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76c3f553, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76e08f67, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU3X1~1.0IL")) returned 1 [0247.136] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.136] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVV5cElDM55ZVzQyN12OcFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvv5celdm55zvzqyn12ocflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.137] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0247.137] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.137] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.202] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0247.203] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0247.204] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.227] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.238] CloseHandle (hObject=0x204) returned 1 [0247.238] CloseHandle (hObject=0x1fc) returned 1 [0247.238] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVV5cElDM55ZVzQyN12OcFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvv5celdm55zvzqyn12ocflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0247.239] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVV5cElDM55ZVzQyN12OcFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvv5celdm55zvzqyn12ocflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0247.239] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c3f553, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76c3f553, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76e08f67, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU3X1~1.0IL")) returned 0x7d2b98 [0247.239] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76c3f553, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76c3f553, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76e08f67, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU3X1~1.0IL")) returned 0 [0247.239] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0247.239] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0247.241] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU3X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju3x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0247.241] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e08f67, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76e08f67, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76f13f47, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU4X1~2.0IL")) returned 1 [0247.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.241] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVV5cElDM55ZVzQyN12OcFlT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvv5celdm55zvzqyn12ocflt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.242] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0247.242] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.243] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.352] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0247.353] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0247.355] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.382] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.395] CloseHandle (hObject=0x1fc) returned 1 [0247.396] CloseHandle (hObject=0x204) returned 1 [0247.399] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVV5cElDM55ZVzQyN12OcFlT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvv5celdm55zvzqyn12ocflt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0247.401] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFMVV5cElDM55ZVzQyN12OcFlT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfmvv5celdm55zvzqyn12ocflt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0247.401] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e08f67, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76e08f67, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76f13f47, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU4X1~2.0IL")) returned 0x7d3018 [0247.401] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76e08f67, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76e08f67, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x76f13f47, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJU4X1~2.0IL")) returned 0 [0247.401] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0247.401] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0247.403] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9E1UdpIC2NYW427XNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9e1udpic2nyw427xnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0247.403] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x764f293e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x764f293e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x765d6d6e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJU4X1~1.0IL")) returned 1 [0247.404] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.404] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlJZF2S1jFH3HozMjRnTFNB75lDM55ZV04yM3lCVFFWSXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dljzf2s1jfh3hozmjrntfnb75ldm55zv04ym3lcvffwsxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.405] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0247.405] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.405] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.473] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0247.473] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0247.474] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.539] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.553] CloseHandle (hObject=0x204) returned 1 [0247.553] CloseHandle (hObject=0x1fc) returned 1 [0247.553] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlJZF2S1jFH3HozMjRnTFNB75lDM55ZV04yM3lCVFFWSXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dljzf2s1jfh3hozmjrntfnb75ldm55zv04ym3lcvffwsxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0247.554] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlJZF2S1jFH3HozMjRnTFNB75lDM55ZV04yM3lCVFFWSXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dljzf2s1jfh3hozmjrntfnb75ldm55zv04ym3lcvffwsxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0247.554] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x764f293e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x764f293e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x765d6d6e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJU4X1~1.0IL")) returned 0x7d2c98 [0247.554] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x764f293e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x764f293e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x765d6d6e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJU4X1~1.0IL")) returned 0 [0247.555] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0247.555] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0247.556] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU4X19D3256ZWN01W96c19DZW4sdW42cl9IdXRj1Glz324gLSAzIC2NYWN23yBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju4x19d3256zwn01w96c19dzw4sdw42cl9idxrj1glz324glsazic2nywn23ybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0247.556] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f13f47, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76f13f47, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7701f142, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJU5X1~1.0IL")) returned 1 [0247.556] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.557] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.557] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0247.557] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.558] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.624] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0247.624] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0247.625] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.648] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.659] CloseHandle (hObject=0x1fc) returned 1 [0247.659] CloseHandle (hObject=0x204) returned 1 [0247.660] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0247.661] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0247.661] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f13f47, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76f13f47, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7701f142, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJU5X1~1.0IL")) returned 0x7d2a18 [0247.661] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f13f47, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x76f13f47, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7701f142, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJU5X1~1.0IL")) returned 0 [0247.661] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0247.661] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0247.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjU5X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mju5x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0247.663] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x763020a6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x763020a6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x764f293e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJUWX1~1.0IL")) returned 1 [0247.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEV5UwZ0tFMTJZM5Z2SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlev5uwz0tfmtjzm5z2suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.664] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0247.664] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.664] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.761] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0247.761] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0247.762] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.786] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.807] CloseHandle (hObject=0x204) returned 1 [0247.807] CloseHandle (hObject=0x1fc) returned 1 [0247.807] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEV5UwZ0tFMTJZM5Z2SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlev5uwz0tfmtjzm5z2suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0247.808] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpVd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEV5UwZ0tFMTJZM5Z2SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpvd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlev5uwz0tfmtjzm5z2suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0247.808] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x763020a6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x763020a6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x764f293e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJUWX1~1.0IL")) returned 0x7d2d58 [0247.808] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x763020a6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x763020a6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x764f293e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJUWX1~1.0IL")) returned 0 [0247.808] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0247.808] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0247.810] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUwX19D3256ZWN01W96c19DZW4sdW42cl9DVE0gKE12Y2FvIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuwx19d3256zwn01w96c19dzw4sdw42cl9dve0gke12y2fvifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0247.810] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765fd3a8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x765fd3a8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7670820a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJUYX1~1.0IL")) returned 1 [0247.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpV7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7VZHOTZ1U0FvVFdG1llXOGdVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpv7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7vzhotz1u0fvvfdg1llxogdvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.811] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0247.811] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.811] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0247.876] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0247.877] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0247.878] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0247.901] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0247.912] CloseHandle (hObject=0x1fc) returned 1 [0247.912] CloseHandle (hObject=0x204) returned 1 [0247.912] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpV7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7VZHOTZ1U0FvVFdG1llXOGdVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpv7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7vzhotz1u0fvvfdg1llxogdvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0247.913] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpV7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7VZHOTZ1U0FvVFdG1llXOGdVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpv7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7vzhotz1u0fvvfdg1llxogdvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0247.913] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765fd3a8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x765fd3a8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7670820a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJUYX1~1.0IL")) returned 0x7d3098 [0247.913] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x765fd3a8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x765fd3a8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7670820a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJUYX1~1.0IL")) returned 0 [0247.913] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0247.913] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0247.915] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUyX19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZSAoTWFjYW8gU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuyx19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zsaotwfjyw8gu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0247.915] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670820a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7670820a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7685f595, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJUZX1~1.0IL")) returned 1 [0247.915] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.915] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpV7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JOWVdO3FpHOTY4V0VnS0U4Ml5yVjUzMjVwWVN3Z1Js3FNU7W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpv7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jowvdo3fphoty4v0vns0u4ml5yvjuzmjvwwvn3z1js3fnu7w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0247.915] CloseHandle (hObject=0x204) returned 1 [0247.915] CloseHandle (hObject=0xffffffff) returned 1 [0247.916] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpV7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JOWVdO3FpHOTY4V0VnS0U4Ml5yVjUzMjVwWVN3Z1Js3FNU7W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpv7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jowvdo3fphoty4v0vns0u4ml5yvjuzmjvwwvn3z1js3fnu7w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0247.916] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpV7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JOWVdO3FpHOTY4V0VnS0U4Ml5yVjUzMjVwWVN3Z1Js3FNU7W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpv7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jowvdo3fphoty4v0vns0u4ml5yvjuzmjvwwvn3z1js3fnu7w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0247.916] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670820a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7670820a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7685f595, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJUZX1~1.0IL")) returned 0x7d2d58 [0247.916] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7670820a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7670820a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7685f595, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJUZX1~1.0IL")) returned 0 [0247.916] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0247.916] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0247.918] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjUzX19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBNYWNlZG961WEgKE12Y2V5325pYSwgRllSTylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjuzx19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbnywnlzg961wegke12y2v5325pyswgrllstylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0247.918] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7701f142, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7701f142, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7717661e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x300056, dwReserved1=0x510046, cFileName="MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJVFX0~1.0IL")) returned 1 [0247.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0247.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpWZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFYQndTVVE2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpwzlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfyqndtvve2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0247.920] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0247.920] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0247.920] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.031] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0248.031] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0248.032] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.055] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.066] CloseHandle (hObject=0x204) returned 1 [0248.066] CloseHandle (hObject=0x1fc) returned 1 [0248.067] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpWZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFYQndTVVE2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpwzlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfyqndtvve2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0248.068] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpWZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFYQndTVVE2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpwzlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfyqndtvve2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0248.068] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7701f142, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7701f142, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7717661e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJVFX0~1.0IL")) returned 0x7d2c18 [0248.068] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7701f142, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7701f142, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7717661e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJVFX0~1.0IL")) returned 0 [0248.068] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0248.068] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 1 [0248.069] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjVfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjvfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0248.070] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7776c26f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7776c26f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77878865, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJY0X1~1.0IL")) returned 1 [0248.070] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.070] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCTjMySnAzR1VnS0U4MjNIUjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lctjmysnazr1vns0u4mjniujjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0248.071] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0248.071] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0248.072] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.137] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0248.137] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0248.138] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.164] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.175] CloseHandle (hObject=0x1fc) returned 1 [0248.175] CloseHandle (hObject=0x204) returned 1 [0248.175] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCTjMySnAzR1VnS0U4MjNIUjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lctjmysnazr1vns0u4mjniujjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0248.177] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCTjMySnAzR1VnS0U4MjNIUjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lctjmysnazr1vns0u4mjniujjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0248.177] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7776c26f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7776c26f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77878865, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJY0X1~1.0IL")) returned 0x7d3098 [0248.177] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7776c26f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7776c26f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77878865, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJY0X1~1.0IL")) returned 0 [0248.177] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0248.177] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0248.179] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY0X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy0x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0248.179] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77878865, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77878865, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7795c0ef, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJY1X1~1.0IL")) returned 1 [0248.179] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0248.179] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCTjMySnAzR1VnS0U4MjNIUjJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lctjmysnazr1vns0u4mjniujjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.180] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0248.180] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0248.180] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.278] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0248.278] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0248.279] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.302] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.313] CloseHandle (hObject=0x204) returned 1 [0248.313] CloseHandle (hObject=0x1fc) returned 1 [0248.313] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCTjMySnAzR1VnS0U4MjNIUjJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lctjmysnazr1vns0u4mjniujjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0248.314] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCTjMySnAzR1VnS0U4MjNIUjJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lctjmysnazr1vns0u4mjniujjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0248.314] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77878865, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77878865, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7795c0ef, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJY1X1~1.0IL")) returned 0x7d3018 [0248.314] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77878865, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77878865, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7795c0ef, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJY1X1~1.0IL")) returned 0 [0248.314] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0248.314] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0248.316] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY1X19D3256ZWN01W96c19DZW4sdW42cl9H3yBN32Jp3GUgKE123HR2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy1x19d3256zwn01w96c19dzw4sdw42cl9h3ybn32jp3gugke123hr2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0248.316] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77982309, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77982309, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77a8d657, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY2X1~1.0IL")) returned 1 [0248.319] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.319] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JOWVc0MFlTQW9UV0ZzZEdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jowvc0mfltqw9uv0zzzedfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0248.319] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0248.319] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0248.320] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.384] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0248.384] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0248.385] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.408] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.420] CloseHandle (hObject=0x1fc) returned 1 [0248.420] CloseHandle (hObject=0x204) returned 1 [0248.420] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JOWVc0MFlTQW9UV0ZzZEdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jowvc0mfltqw9uv0zzzedfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0248.421] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JOWVc0MFlTQW9UV0ZzZEdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jowvc0mfltqw9uv0zzzedfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0248.421] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77982309, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77982309, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77a8d657, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY2X1~1.0IL")) returned 0x7d3018 [0248.421] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77982309, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77982309, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77a8d657, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY2X1~1.0IL")) returned 0 [0248.421] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0248.421] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0248.423] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY2X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBNYW40YSAoTWFsdGEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy2x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbnyw40ysaotwfsdgepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0248.423] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a8d657, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77a8d657, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77ca3489, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJY3X1~1.0IL")) returned 1 [0248.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0248.423] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.424] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0248.424] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0248.424] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.489] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0248.489] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0248.490] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.514] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.525] CloseHandle (hObject=0x204) returned 1 [0248.525] CloseHandle (hObject=0x1fc) returned 1 [0248.525] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0248.526] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0248.526] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a8d657, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77a8d657, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77ca3489, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJY3X1~1.0IL")) returned 0x7d2998 [0248.526] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a8d657, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77a8d657, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77ca3489, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJY3X1~1.0IL")) returned 0 [0248.526] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0248.526] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0248.528] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0248.528] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772a7bbd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x772a7bbd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7738c7dc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY4X1~1.0IL")) returned 1 [0248.528] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.528] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjV5S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymjv5s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0248.529] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0248.529] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0248.529] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.625] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0248.626] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0248.627] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.651] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0248.664] CloseHandle (hObject=0x1fc) returned 1 [0248.664] CloseHandle (hObject=0x204) returned 1 [0248.665] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjV5S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymjv5s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0248.665] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjV5S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymjv5s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0248.666] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772a7bbd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x772a7bbd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7738c7dc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY4X1~1.0IL")) returned 0x7d2ad8 [0248.666] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x772a7bbd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x772a7bbd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7738c7dc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY4X1~1.0IL")) returned 0 [0248.666] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0248.666] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0248.667] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0248.668] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ca3489, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77ca3489, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77dae63e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY4X1~2.0IL")) returned 1 [0248.668] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0248.668] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVUlU0RFJVd2dSMU5OSUMyTlpYMnBZMj2wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvulu0rfjvd2dsmu5osumytlpymnbzmj2wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0248.669] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0248.669] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0248.669] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0248.928] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0248.928] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0248.929] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0248.997] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.008] CloseHandle (hObject=0x204) returned 1 [0249.008] CloseHandle (hObject=0x1fc) returned 1 [0249.008] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVUlU0RFJVd2dSMU5OSUMyTlpYMnBZMj2wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvulu0rfjvd2dsmu5osumytlpymnbzmj2wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0249.009] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVUlU0RFJVd2dSMU5OSUMyTlpYMnBZMj2wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvulu0rfjvd2dsmu5osumytlpymnbzmj2wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0249.009] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ca3489, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77ca3489, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77dae63e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY4X1~2.0IL")) returned 0x7d2cd8 [0249.010] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77ca3489, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77ca3489, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77dae63e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJY4X1~2.0IL")) returned 0 [0249.010] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0249.010] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0249.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY4X19D3256ZWN01W96c19DZW4sdW42cl9URU4DRUwgR1NNIC2NZX2pY28pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy4x19d3256zwn01w96c19dzw4sdw42cl9uru4druwgr1nnic2nzx2py28px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0249.011] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dae63e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77dae63e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77eb95bd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJY5X1~1.0IL")) returned 1 [0249.011] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.012] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.012] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0249.012] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.013] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.078] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0249.079] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0249.080] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.105] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.116] CloseHandle (hObject=0x1fc) returned 1 [0249.116] CloseHandle (hObject=0x204) returned 1 [0249.116] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0249.117] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZNVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpznvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0249.117] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dae63e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77dae63e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77eb95bd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJY5X1~1.0IL")) returned 0x7d2a58 [0249.117] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77dae63e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77dae63e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x77eb95bd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJY5X1~1.0IL")) returned 0 [0249.117] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0249.117] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0249.119] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjY5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjy5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0249.119] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7717661e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7717661e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7728178d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJYWX1~1.0IL")) returned 1 [0249.119] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.119] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.120] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0249.120] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.120] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.185] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0249.185] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0249.186] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.210] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.221] CloseHandle (hObject=0x204) returned 1 [0249.221] CloseHandle (hObject=0x1fc) returned 1 [0249.221] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0249.222] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVgycGN5QW9UV0ZzWV2s7jFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpzd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvgycgn5qw9uv0zzwv2s7jfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0249.222] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7717661e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7717661e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7728178d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJYWX1~1.0IL")) returned 0x7d2998 [0249.222] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7717661e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7717661e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7728178d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJYWX1~1.0IL")) returned 0 [0249.222] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0249.222] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0249.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYwX19D3256ZWN01W96c19DZW4sdW42cl9NYX2pcyAoTWFsYXlz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjywx19d3256zwn01w96c19dzw4sdw42cl9nyx2pcyaotwfsyxlz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0249.224] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773b2a74, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x773b2a74, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7753029d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJYYX1~1.0IL")) returned 1 [0249.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVMVc43F5yVnNJQzJOWVc0MjdYTnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpz7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvmvc43f5yvnnjqzjowvc0mjdytnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.225] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0249.225] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.225] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.289] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0249.289] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0249.290] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.313] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.324] CloseHandle (hObject=0x1fc) returned 1 [0249.324] CloseHandle (hObject=0x204) returned 1 [0249.324] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVMVc43F5yVnNJQzJOWVc0MjdYTnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpz7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvmvc43f5yvnnjqzjowvc0mjdytnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0249.324] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVMVc43F5yVnNJQzJOWVc0MjdYTnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpz7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvmvc43f5yvnnjqzjowvc0mjdytnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0249.325] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773b2a74, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x773b2a74, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7753029d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJYYX1~1.0IL")) returned 0x7d3098 [0249.325] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x773b2a74, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x773b2a74, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7753029d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MJYYX1~1.0IL")) returned 0 [0249.325] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0249.325] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0249.326] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYyX19D3256ZWN01W96c19DZW4sdW42cl9U1W1lY2VsIC2NYW427XNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyyx19d3256zwn01w96c19dzw4sdw42cl9u1w1ly2vsic2nyw427xnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0249.326] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7753029d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7753029d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7776c26f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJYZX1~1.0IL")) returned 1 [0249.326] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.327] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWSUU4dllt3HN1U0FvVFdGc1lY3Ho4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpz7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwsuu4dllt3hn1u0fvvfdgc1ly3ho4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.327] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0249.327] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.328] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.428] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0249.428] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0249.429] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.452] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.463] CloseHandle (hObject=0x204) returned 1 [0249.463] CloseHandle (hObject=0x1fc) returned 1 [0249.463] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWSUU4dllt3HN1U0FvVFdGc1lY3Ho4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpz7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwsuu4dllt3hn1u0fvvfdgc1ly3ho4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0249.464] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWpZ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWSUU4dllt3HN1U0FvVFdGc1lY3Ho4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twpz7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwsuu4dllt3hn1u0fvvfdgc1ly3ho4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0249.464] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7753029d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7753029d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7776c26f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJYZX1~1.0IL")) returned 0x7d3018 [0249.464] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7753029d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7753029d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7776c26f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MJYZX1~1.0IL")) returned 0 [0249.465] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0249.465] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0249.466] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjYzX19D3256ZWN01W96c19DZW4sdW42cl9VIE1vYmlsZSAoTWFsYXlz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjyzx19d3256zwn01w96c19dzw4sdw42cl9vie1vymlszsaotwfsyxlz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0249.466] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eb95bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77eb95bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x780cf8ee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJZFX0~1.0IL")) returned 1 [0249.466] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.467] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWp1ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEU0SUMyQmRYTjBj3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twp1zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymeu0sumyqmrytjbj3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.471] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x340 [0249.471] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.471] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.536] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x340, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x340, lpOverlapped=0x0) returned 1 [0249.536] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0249.537] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.561] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.573] CloseHandle (hObject=0x1fc) returned 1 [0249.573] CloseHandle (hObject=0x204) returned 1 [0249.573] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWp1ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEU0SUMyQmRYTjBj3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twp1zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymeu0sumyqmrytjbj3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0249.574] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWp1ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEU0SUMyQmRYTjBj3WwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\twp1zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymeu0sumyqmrytjbj3wwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0249.574] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eb95bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77eb95bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x780cf8ee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJZFX0~1.0IL")) returned 0x7d3018 [0249.574] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77eb95bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x77eb95bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x780cf8ee, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MJZFX0~1.0IL")) returned 0 [0249.574] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0249.574] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0249.576] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MjZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0E4IC2BdXN0cml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mjzfx0nv3m5ly3rp325zx0nl3g413gfyx0e4ic2bdxn0cml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0249.576] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3ae024, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b3ae024, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b59deaf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="ML9FQ2~1.0IL")) returned 1 [0249.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWw5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZSR3BsN25wNUlDM5IzR2RsY21sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tww5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzsr3bsn25wnuldm5izr2rsy21sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.577] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0249.577] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.578] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.643] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0249.643] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0249.644] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.668] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.679] CloseHandle (hObject=0x204) returned 1 [0249.679] CloseHandle (hObject=0x1fc) returned 1 [0249.680] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWw5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZSR3BsN25wNUlDM5IzR2RsY21sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tww5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzsr3bsn25wnuldm5izr2rsy21sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0249.681] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TWw5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZSR3BsN25wNUlDM5IzR2RsY21sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tww5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzsr3bsn25wnuldm5izr2rsy21sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0249.681] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3ae024, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b3ae024, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b59deaf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="ML9FQ2~1.0IL")) returned 0x7d3018 [0249.681] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b3ae024, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b3ae024, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b59deaf, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="ML9FQ2~1.0IL")) returned 0 [0249.681] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0249.681] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0249.682] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Ml9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfRGpl7np5IC2B3Gdlcml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\ml9fq2963mvjdglv3nnfq2vs3hvsyxjfrgpl7np5ic2b3gdlcml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0249.682] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703b37b0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x703b37b0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7050aeab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT2FX0~1.0IL")) returned 1 [0249.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.683] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQyZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFXTmozM1Y2ZEVWNGNHVn54V1Y2WTJWVlU1dzZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvqyzlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfxtmozm1y2zevwngnhvn54v1y2wtjwvlu1dzzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.684] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0249.684] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.684] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.784] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0249.784] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0249.788] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0249.820] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0249.830] CloseHandle (hObject=0x1fc) returned 1 [0249.830] CloseHandle (hObject=0x204) returned 1 [0249.831] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQyZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFXTmozM1Y2ZEVWNGNHVn54V1Y2WTJWVlU1dzZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvqyzlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfxtmozm1y2zevwngnhvn54v1y2wtjwvlu1dzzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0249.832] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQyZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFXTmozM1Y2ZEVWNGNHVn54V1Y2WTJWVlU1dzZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvqyzlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfxtmozm1y2zevwngnhvn54v1y2wtjwvlu1dzzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0249.833] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703b37b0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x703b37b0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7050aeab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT2FX0~1.0IL")) returned 0x7d3018 [0249.833] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x703b37b0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x703b37b0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7050aeab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT2FX0~1.0IL")) returned 0 [0249.833] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0249.834] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 1 [0249.835] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT2fX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQWNj33V6dEV4cGVy1WV6Y2VVU5w6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt2fx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqwnj33v6dev4cgvy1wv6y2vvu5w6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0249.835] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a42174, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70a42174, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70b4d1ba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT50X1~1.0IL")) returned 1 [0249.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0249.836] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCMV2KMFpXd2dLRWw2W5dsM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcmv2kmfpxd2dlrww2w5dsm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0249.836] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0249.836] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0249.837] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0249.998] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0249.998] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0249.999] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.022] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.033] CloseHandle (hObject=0x204) returned 1 [0250.033] CloseHandle (hObject=0x1fc) returned 1 [0250.033] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCMV2KMFpXd2dLRWw2W5dsM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcmv2kmfpxd2dlrww2w5dsm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0250.034] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCMV2KMFpXd2dLRWw2W5dsM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcmv2kmfpxd2dlrww2w5dsm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0250.034] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a42174, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70a42174, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70b4d1ba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT50X1~1.0IL")) returned 0x7d3018 [0250.034] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a42174, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70a42174, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70b4d1ba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT50X1~1.0IL")) returned 0 [0250.034] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0250.034] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0250.036] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT50X19D3256ZWN01W96c19DZW4sdW42cl9B1XJ0ZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt50x19d3256zwn01w96c19dzw4sdw42cl9b1xj0zwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0250.036] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b4d1ba, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70b4d1ba, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70c7e4fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT51X1~1.0IL")) returned 1 [0250.037] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.037] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlKM21SdmMyRjBJQzJKM21SdjNtVno4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlkm21sdmmyrjbjqzjkm21sdjntvno4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.037] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0250.037] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.038] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.103] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0250.103] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0250.104] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.128] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.139] CloseHandle (hObject=0x1fc) returned 1 [0250.139] CloseHandle (hObject=0x204) returned 1 [0250.140] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlKM21SdmMyRjBJQzJKM21SdjNtVno4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlkm21sdmmyrjbjqzjkm21sdjntvno4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0250.140] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlKM21SdmMyRjBJQzJKM21SdjNtVno4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlkm21sdmmyrjbjqzjkm21sdjntvno4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0250.141] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b4d1ba, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70b4d1ba, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70c7e4fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT51X1~1.0IL")) returned 0x7d2ad8 [0250.141] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70b4d1ba, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70b4d1ba, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70c7e4fd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT51X1~1.0IL")) returned 0 [0250.141] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0250.141] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0250.142] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT51X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt51x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0250.142] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c7e4fd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70c7e4fd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70e4804a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT52X1~1.0IL")) returned 1 [0250.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.143] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlKM21SdmMyRjBJQzJKM21SdjNtVno4V0VwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlkm21sdmmyrjbjqzjkm21sdjntvno4v0vwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.143] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0250.144] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.144] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.211] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0250.211] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0250.212] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.235] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.246] CloseHandle (hObject=0x204) returned 1 [0250.246] CloseHandle (hObject=0x1fc) returned 1 [0250.247] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlKM21SdmMyRjBJQzJKM21SdjNtVno4V0VwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlkm21sdmmyrjbjqzjkm21sdjntvno4v0vwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0250.247] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlKM21SdmMyRjBJQzJKM21SdjNtVno4V0VwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlkm21sdmmyrjbjqzjkm21sdjntvno4v0vwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0250.248] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c7e4fd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70c7e4fd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70e4804a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT52X1~1.0IL")) returned 0x7d3018 [0250.248] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70c7e4fd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70c7e4fd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70e4804a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT52X1~1.0IL")) returned 0 [0250.248] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0250.248] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0250.249] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT52X19D3256ZWN01W96c19DZW4sdW42cl9J3mRvc2F0IC2J3mRv3mVz1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt52x19d3256zwn01w96c19dzw4sdw42cl9j3mrvc2f0ic2j3mrv3mvz1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0250.249] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4804a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70e4804a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70f5316f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT53X1~1.0IL")) returned 1 [0250.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.250] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1M1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cjMyMXp1V3dnS0VsNlpHOTZ1WE5wWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1m1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cjmymxp1v3dns0vsnlphotz1we5wwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.251] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0250.251] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.251] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.354] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0250.354] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0250.355] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.377] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.390] CloseHandle (hObject=0x1fc) returned 1 [0250.390] CloseHandle (hObject=0x204) returned 1 [0250.390] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1M1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cjMyMXp1V3dnS0VsNlpHOTZ1WE5wWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1m1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cjmymxp1v3dns0vsnlphotz1we5wwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0250.391] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1M1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cjMyMXp1V3dnS0VsNlpHOTZ1WE5wWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1m1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cjmymxp1v3dns0vsnlphotz1we5wwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0250.391] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4804a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70e4804a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70f5316f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT53X1~1.0IL")) returned 0x7d2c18 [0250.391] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70e4804a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70e4804a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70f5316f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT53X1~1.0IL")) returned 0 [0250.392] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0250.392] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0250.393] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT53X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt53x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0250.393] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5316f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70f5316f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7105e14f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT54X1~2.0IL")) returned 1 [0250.394] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.394] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cjMyMXp1V3dnS0VsNlpHOTZ1WE5wWVNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cjmymxp1v3dns0vsnlphotz1we5wwvnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.394] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0250.394] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.395] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.460] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0250.460] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0250.461] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.485] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.497] CloseHandle (hObject=0x204) returned 1 [0250.497] CloseHandle (hObject=0x1fc) returned 1 [0250.497] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cjMyMXp1V3dnS0VsNlpHOTZ1WE5wWVNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cjmymxp1v3dns0vsnlphotz1we5wwvnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0250.498] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cjMyMXp1V3dnS0VsNlpHOTZ1WE5wWVNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cjmymxp1v3dns0vsnlphotz1we5wwvnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0250.498] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5316f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70f5316f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7105e14f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT54X1~2.0IL")) returned 0x7d3018 [0250.498] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5316f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x70f5316f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7105e14f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT54X1~2.0IL")) returned 0 [0250.498] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0250.498] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0250.500] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9UZW4r321zZWwgKEl6ZG96ZXNpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9uzw4r321zzwwgkel6zg96zxnpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0250.500] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x706621f7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x706621f7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7076d4dd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT54X1~1.0IL")) returned 1 [0250.500] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.501] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKWTJWc1lXNTVJQzJKWTJWc1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jkwtjwc1lxntvjqzjkwtjwc1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.501] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0250.501] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.502] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.570] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0250.570] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0250.571] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.594] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.606] CloseHandle (hObject=0x1fc) returned 1 [0250.607] CloseHandle (hObject=0x204) returned 1 [0250.607] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKWTJWc1lXNTVJQzJKWTJWc1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jkwtjwc1lxntvjqzjkwtjwc1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0250.608] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JKWTJWc1lXNTVJQzJKWTJWc1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jkwtjwc1lxntvjqzjkwtjwc1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0250.608] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x706621f7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x706621f7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7076d4dd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT54X1~1.0IL")) returned 0x7d2a58 [0250.608] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x706621f7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x706621f7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7076d4dd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT54X1~1.0IL")) returned 0 [0250.608] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0250.608] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0250.609] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT54X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBJY2VsYW55IC2JY2VsYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt54x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbjy2vsyw55ic2jy2vsyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0250.610] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7105e14f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7105e14f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x711df136, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT55X1~1.0IL")) returned 1 [0250.610] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.610] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0FvU1c1NTMyNW4jMmwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0fvu1c1ntmynw4jmmwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.611] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0250.611] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.611] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.675] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0250.675] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0250.676] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.751] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.762] CloseHandle (hObject=0x204) returned 1 [0250.762] CloseHandle (hObject=0x1fc) returned 1 [0250.763] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0FvU1c1NTMyNW4jMmwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0fvu1c1ntmynw4jmmwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0250.763] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1NVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0FvU1c1NTMyNW4jMmwyS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1nvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0fvu1c1ntmynw4jmmwys1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0250.764] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7105e14f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7105e14f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x711df136, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT55X1~1.0IL")) returned 0x7d2b58 [0250.764] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7105e14f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7105e14f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x711df136, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT55X1~1.0IL")) returned 0 [0250.764] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0250.764] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0250.765] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT55X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSAoSW55325lc2l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt55x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsaosw55325lc2l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0250.765] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7050aeab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7050aeab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x706621f7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT5WX1~1.0IL")) returned 1 [0250.766] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.766] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc4cDNtNGc4R1lnS0Vs1lpXNDIz3VFwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc4cdntngc4r1lns0vs1lpxndiz3vfwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.767] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0250.767] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.767] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.843] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0250.843] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0250.844] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0250.867] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0250.878] CloseHandle (hObject=0x1fc) returned 1 [0250.878] CloseHandle (hObject=0x204) returned 1 [0250.878] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc4cDNtNGc4R1lnS0Vs1lpXNDIz3VFwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc4cdntngc4r1lns0vs1lpxndiz3vfwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0250.881] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc4cDNtNGc4R1lnS0Vs1lpXNDIz3VFwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc4cdntngc4r1lns0vs1lpxndiz3vfwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0250.881] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7050aeab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7050aeab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x706621f7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT5WX1~1.0IL")) returned 0x7d3018 [0250.881] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7050aeab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7050aeab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x706621f7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MT5WX1~1.0IL")) returned 0 [0250.881] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0250.881] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0250.883] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5wX19D3256ZWN01W96c19DZW4sdW42cl9T1W1p3m4g1GYgKEljZW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5wx19d3256zwn01w96c19dzw4sdw42cl9t1w1p3m4g1gygkeljzw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0250.883] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7076d4dd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7076d4dd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70910c11, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT5YX1~1.0IL")) returned 1 [0250.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0250.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ17Vg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq17vg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0250.884] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0250.884] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0250.884] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0250.990] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0250.990] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0250.991] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.016] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.027] CloseHandle (hObject=0x204) returned 1 [0251.027] CloseHandle (hObject=0x1fc) returned 1 [0251.027] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ17Vg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq17vg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0251.028] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ17Vg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq17vg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0251.028] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7076d4dd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7076d4dd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70910c11, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT5YX1~1.0IL")) returned 0x7d2b98 [0251.028] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7076d4dd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7076d4dd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70910c11, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MT5YX1~1.0IL")) returned 0 [0251.028] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0251.028] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0251.030] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5yX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5yx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0251.030] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709370e1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x709370e1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70a42174, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT5ZX1~1.0IL")) returned 1 [0251.030] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.030] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCMV2K1lpXd2dLRWw2W5dsM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcmv2k1lpxd2dlrww2w5dsm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.031] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0251.031] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.031] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.144] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0251.144] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0251.146] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.169] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.180] CloseHandle (hObject=0x1fc) returned 1 [0251.180] CloseHandle (hObject=0x204) returned 1 [0251.180] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCMV2K1lpXd2dLRWw2W5dsM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcmv2k1lpxd2dlrww2w5dsm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0251.181] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVQ17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCMV2K1lpXd2dLRWw2W5dsM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvq17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcmv2k1lpxd2dlrww2w5dsm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0251.182] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709370e1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x709370e1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70a42174, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT5ZX1~1.0IL")) returned 0x7d3018 [0251.182] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x709370e1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x709370e1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x70a42174, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MT5ZX1~1.0IL")) returned 0 [0251.182] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0251.182] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0251.183] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MT5zX19D3256ZWN01W96c19DZW4sdW42cl9B1XJjZWwgKEl6ZGl2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mt5zx19d3256zwn01w96c19dzw4sdw42cl9b1xjjzwwgkel6zgl2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0251.183] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e7217f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66e7217f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67023dc9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTA0X1~1.0IL")) returned 1 [0251.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.184] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRVDFKVVFTQ52VMDBnS0VW1mRXRjUzM0lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrvdfkvvftq52vmdbns0vw1mrxrjuzm0lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.185] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0251.185] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.185] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.250] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0251.250] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0251.251] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.274] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.285] CloseHandle (hObject=0x204) returned 1 [0251.285] CloseHandle (hObject=0x1fc) returned 1 [0251.285] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRVDFKVVFTQ52VMDBnS0VW1mRXRjUzM0lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrvdfkvvftq52vmdbns0vw1mrxrjuzm0lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0251.286] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRVDFKVVFTQ52VMDBnS0VW1mRXRjUzM0lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrvdfkvvftq52vmdbns0vw1mrxrjuzm0lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0251.286] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e7217f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66e7217f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67023dc9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTA0X1~1.0IL")) returned 0x7d2c18 [0251.287] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66e7217f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66e7217f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67023dc9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTA0X1~1.0IL")) returned 0 [0251.287] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0251.287] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0251.288] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA0X19D3256ZWN01W96c19DZW4sdW42cl9QT1JUQSBHU00gKEVjdWF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta0x19d3256zwn01w96c19dzw4sdw42cl9qt1juqsbhu00gkevjdwf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0251.288] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67023dc9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67023dc9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x671edc19, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTA1X1~1.0IL")) returned 1 [0251.289] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.289] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyRl5zVjJ1Rzl5S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyrl5zvjj1rzl5s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.290] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0251.290] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.290] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.390] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0251.391] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0251.392] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.416] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.426] CloseHandle (hObject=0x1fc) returned 1 [0251.427] CloseHandle (hObject=0x204) returned 1 [0251.427] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyRl5zVjJ1Rzl5S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyrl5zvjj1rzl5s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0251.428] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyRl5zVjJ1Rzl5S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyrl5zvjj1rzl5s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0251.428] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67023dc9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67023dc9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x671edc19, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTA1X1~1.0IL")) returned 0x7d2cd8 [0251.428] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67023dc9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67023dc9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x671edc19, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTA1X1~1.0IL")) returned 0 [0251.428] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0251.428] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0251.430] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2FY3V2ZG9yKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta1x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2fy3v2zg9ykv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0251.430] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x671edc19, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x671edc19, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6736cc38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA2X1~1.0IL")) returned 1 [0251.430] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.430] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNt3HNJQzJGWjNsd2RD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnt3hnjqzjgwjnsd2rd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.431] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0251.431] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.431] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.496] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0251.496] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0251.497] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.521] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.532] CloseHandle (hObject=0x204) returned 1 [0251.532] CloseHandle (hObject=0x1fc) returned 1 [0251.532] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNt3HNJQzJGWjNsd2RD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnt3hnjqzjgwjnsd2rd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0251.533] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNt3HNJQzJGWjNsd2RD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnt3hnjqzjgwjnsd2rd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0251.533] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x671edc19, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x671edc19, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6736cc38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA2X1~1.0IL")) returned 0x7d3018 [0251.533] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x671edc19, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x671edc19, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6736cc38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA2X1~1.0IL")) returned 0 [0251.533] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0251.534] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0251.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA2X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3mlsIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta2x19d3256zwn01w96c19dzw4sdw42cl9n32jp3mlsic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0251.536] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6736cc38, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6736cc38, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6758134e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTA3X1~1.0IL")) returned 1 [0251.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.536] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JGWjNsd2RDQW9SV2Q1Y02RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jgwjnsd2rdqw9sv2q1y02rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.537] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x370 [0251.537] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.537] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.604] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x370, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0251.605] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0251.606] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.628] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.639] CloseHandle (hObject=0x1fc) returned 1 [0251.639] CloseHandle (hObject=0x204) returned 1 [0251.640] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JGWjNsd2RDQW9SV2Q1Y02RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jgwjnsd2rdqw9sv2q1y02rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0251.641] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JGWjNsd2RDQW9SV2Q1Y02RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jgwjnsd2rdqw9sv2q1y02rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0251.641] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6736cc38, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6736cc38, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6758134e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTA3X1~1.0IL")) returned 0x7d3018 [0251.641] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6736cc38, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6736cc38, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6758134e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTA3X1~1.0IL")) returned 0 [0251.641] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0251.641] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0251.642] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBFZ3lwdCAoRWd5cHQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbfz3lwdcaorwd5chqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0251.642] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668352de, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x668352de, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x676b27bc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA4X1~1.0IL")) returned 1 [0251.643] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.643] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.644] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0251.644] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.644] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.712] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0251.712] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0251.713] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0251.736] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0251.748] CloseHandle (hObject=0x204) returned 1 [0251.748] CloseHandle (hObject=0x1fc) returned 1 [0251.749] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0251.750] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0251.750] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668352de, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x668352de, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x676b27bc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA4X1~1.0IL")) returned 0x7d2d58 [0251.750] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x668352de, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x668352de, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x676b27bc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA4X1~1.0IL")) returned 0 [0251.750] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0251.750] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0251.752] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0251.752] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b27bc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x676b27bc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6787c220, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA5X1~1.0IL")) returned 1 [0251.752] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0251.752] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGZEds7llXNDJ5Q0JOMV2O7UlDM5Z1M243ZENsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgzeds7llxndj5q0jomv2o7uldm5z1m243zenszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0251.753] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0251.753] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0251.753] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0251.993] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0251.993] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0251.994] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.018] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.028] CloseHandle (hObject=0x1fc) returned 1 [0252.028] CloseHandle (hObject=0x204) returned 1 [0252.029] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGZEds7llXNDJ5Q0JOMV2O7UlDM5Z1M243ZENsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgzeds7llxndj5q0jomv2o7uldm5z1m243zenszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0252.030] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGZEds7llXNDJ5Q0JOMV2O7UlDM5Z1M243ZENsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgzeds7llxndj5q0jomv2o7uldm5z1m243zenszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0252.030] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b27bc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x676b27bc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6787c220, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA5X1~1.0IL")) returned 0x7d2b18 [0252.030] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x676b27bc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x676b27bc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6787c220, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTA5X1~1.0IL")) returned 0 [0252.030] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0252.030] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0252.032] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTA5X19D3256ZWN01W96c19DZW4sdW42cl9FdGlzYW42dCBN1XNyIC2FZ3lwdClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mta5x19d3256zwn01w96c19dzw4sdw42cl9fdglzyw42dcbn1xnyic2fz3lwdclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0252.032] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c599c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x666c599c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6680efd6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTAWX1~1.0IL")) returned 1 [0252.032] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.033] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cFlTQ5VT7UFvU5dWNjNXRn547W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cfltq5vt7ufvu5dwnjnxrn547w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.033] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0252.033] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.034] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.099] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0252.099] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0252.100] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.124] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.135] CloseHandle (hObject=0x204) returned 1 [0252.136] CloseHandle (hObject=0x1fc) returned 1 [0252.136] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cFlTQ5VT7UFvU5dWNjNXRn547W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cfltq5vt7ufvu5dwnjnxrn547w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0252.137] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc0cFlTQ5VT7UFvU5dWNjNXRn547W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc0cfltq5vt7ufvu5dwnjnxrn547w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0252.137] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c599c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x666c599c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6680efd6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTAWX1~1.0IL")) returned 0x7d2c18 [0252.137] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x666c599c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x666c599c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6680efd6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTAWX1~1.0IL")) returned 0 [0252.137] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0252.137] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0252.139] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4pYSBESyAoRGV63WFy1ylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtawx19d3256zwn01w96c19dzw4sdw42cl9uzw4pysbesyaorgv63wfy1ylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0252.139] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a24f6a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66a24f6a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x66cf9c38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTAYX1~1.0IL")) returned 1 [0252.139] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.140] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SRzl0MVc1cF5yRjZJR5psY02W1TNH3GpLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9srzl0mvc1cf5yrjzjr5psy02w1tnh3gplvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.140] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0252.140] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.141] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.207] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0252.208] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0252.209] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.231] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.243] CloseHandle (hObject=0x1fc) returned 1 [0252.243] CloseHandle (hObject=0x204) returned 1 [0252.244] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SRzl0MVc1cF5yRjZJR5psY02W1TNH3GpLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9srzl0mvc1cf5yrjzjr5psy02w1tnh3gplvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0252.245] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SRzl0MVc1cF5yRjZJR5psY02W1TNH3GpLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9srzl0mvc1cf5yrjzjr5psy02w1tnh3gplvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0252.245] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a24f6a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66a24f6a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x66cf9c38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTAYX1~1.0IL")) returned 0x7d3018 [0252.245] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66a24f6a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66a24f6a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x66cf9c38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTAYX1~1.0IL")) returned 0 [0252.245] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0252.245] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0252.247] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAyX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtayx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0252.247] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66d1ff8d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66d1ff8d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x66e7217f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTAZX1~1.0IL")) returned 1 [0252.247] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.247] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SRzl0MVc1cF5yRjZJR5psY02W1TNH3GpLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9srzl0mvc1cf5yrjzjr5psy02w1tnh3gplvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.248] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b0 [0252.248] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.248] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.361] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2b0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0252.362] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0252.363] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.385] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.397] CloseHandle (hObject=0x204) returned 1 [0252.398] CloseHandle (hObject=0x1fc) returned 1 [0252.398] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SRzl0MVc1cF5yRjZJR5psY02W1TNH3GpLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9srzl0mvc1cf5yrjzjr5psy02w1tnh3gplvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0252.399] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SRzl0MVc1cF5yRjZJR5psY02W1TNH3GpLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9srzl0mvc1cf5yrjzjr5psy02w1tnh3gplvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0252.399] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66d1ff8d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66d1ff8d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x66e7217f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTAZX1~1.0IL")) returned 0x7d3018 [0252.399] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66d1ff8d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x66d1ff8d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x66e7217f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2b0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTAZX1~1.0IL")) returned 0 [0252.399] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0252.399] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0252.401] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTAzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRG9t1W5pY2F6IFJlcHVi3GljKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtazx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorg9t1w5py2f6ifjlchvi3gljkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0252.401] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6787c220, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6787c220, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67a1fd89, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTBFX0~1.0IL")) returned 1 [0252.401] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.401] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.402] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0252.402] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.402] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.486] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0252.486] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0252.487] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.511] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.522] CloseHandle (hObject=0x1fc) returned 1 [0252.522] CloseHandle (hObject=0x204) returned 1 [0252.523] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0252.524] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0252.524] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6787c220, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6787c220, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67a1fd89, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTBFX0~1.0IL")) returned 0x7d2918 [0252.524] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6787c220, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6787c220, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67a1fd89, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTBFX0~1.0IL")) returned 0 [0252.524] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0252.524] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0252.526] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtbfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0252.526] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e926d13, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e926d13, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ea31b85, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTC0X1~1.0IL")) returned 1 [0252.526] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.526] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEVTB3Z0tFMnYz3WNnUzI5Nlp5QlRRV5lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlevtb3z0tfmnyz3wnnuzi5nlp5qlrrv5lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.527] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0252.527] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.527] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.593] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0252.593] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0252.594] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.618] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.629] CloseHandle (hObject=0x204) returned 1 [0252.629] CloseHandle (hObject=0x1fc) returned 1 [0252.630] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEVTB3Z0tFMnYz3WNnUzI5Nlp5QlRRV5lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlevtb3z0tfmnyz3wnnuzi5nlp5qlrrv5lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0252.631] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEVTB3Z0tFMnYz3WNnUzI5Nlp5QlRRV5lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlevtb3z0tfmnyz3wnnuzi5nlp5qlrrv5lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0252.631] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e926d13, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e926d13, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ea31b85, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTC0X1~1.0IL")) returned 0x7d3018 [0252.631] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e926d13, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e926d13, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ea31b85, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTC0X1~1.0IL")) returned 0 [0252.631] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0252.631] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0252.633] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc0X19D3256ZWN01W96c19DZW4sdW42cl9DU0wgKE2v3mcgS296ZyBTQVIpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc0x19d3256zwn01w96c19dzw4sdw42cl9du0wgke2v3mcgs296zybtqvipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0252.633] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea31b85, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ea31b85, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6eb892e7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC1X1~1.0IL")) returned 1 [0252.633] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.633] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.637] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0252.637] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.638] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.737] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0252.737] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0252.739] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.762] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.773] CloseHandle (hObject=0x1fc) returned 1 [0252.773] CloseHandle (hObject=0x204) returned 1 [0252.773] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0252.774] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0252.774] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea31b85, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ea31b85, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6eb892e7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC1X1~1.0IL")) returned 0x7d2b98 [0252.774] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ea31b85, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ea31b85, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6eb892e7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC1X1~1.0IL")) returned 0 [0252.774] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0252.775] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0252.776] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc1X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc1x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0252.776] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb892e7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6eb892e7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ece06d0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC2X1~1.0IL")) returned 1 [0252.777] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.777] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.777] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0252.777] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.778] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0252.852] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0252.852] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0252.853] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0252.875] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0252.886] CloseHandle (hObject=0x204) returned 1 [0252.886] CloseHandle (hObject=0x1fc) returned 1 [0252.886] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0252.887] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0252.887] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb892e7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6eb892e7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ece06d0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC2X1~1.0IL")) returned 0x7d2d58 [0252.888] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6eb892e7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6eb892e7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ece06d0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC2X1~1.0IL")) returned 0 [0252.888] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0252.888] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0252.889] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc2X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc2x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0252.889] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ed06778, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ed06778, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ee11b3d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC3X1~1.0IL")) returned 1 [0252.890] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0252.890] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTWlR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtwlr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0252.890] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0252.890] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0252.891] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.005] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0253.005] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0253.007] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.030] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.041] CloseHandle (hObject=0x1fc) returned 1 [0253.041] CloseHandle (hObject=0x204) returned 1 [0253.042] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTWlR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtwlr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0253.043] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTWlR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtwlr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0253.043] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ed06778, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ed06778, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ee11b3d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC3X1~1.0IL")) returned 0x7d3018 [0253.043] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ed06778, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ed06778, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ee11b3d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC3X1~1.0IL")) returned 0 [0253.043] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0253.043] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0253.044] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc3X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMiQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc3x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmiqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0253.045] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee11b3d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ee11b3d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ef8f287, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC4X1~2.0IL")) returned 1 [0253.045] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.045] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTXlR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtxlr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.046] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0253.046] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.046] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.110] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0253.110] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0253.112] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.134] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.145] CloseHandle (hObject=0x204) returned 1 [0253.145] CloseHandle (hObject=0x1fc) returned 1 [0253.146] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTXlR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtxlr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0253.146] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTXlR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtxlr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0253.147] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee11b3d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ee11b3d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ef8f287, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC4X1~2.0IL")) returned 0x7d2d58 [0253.147] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ee11b3d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ee11b3d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ef8f287, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC4X1~2.0IL")) returned 0 [0253.147] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0253.147] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0253.148] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pMyQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pmyqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0253.149] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e488358, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e488358, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e593cfb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTC4X1~1.0IL")) returned 1 [0253.149] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.149] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9TRz52W52W7VlYTXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9trz52w52w7vlytxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.150] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0253.150] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.150] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.215] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0253.215] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0253.216] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.241] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.252] CloseHandle (hObject=0x1fc) returned 1 [0253.252] CloseHandle (hObject=0x204) returned 1 [0253.252] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9TRz52W52W7VlYTXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9trz52w52w7vlytxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0253.253] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9TRz52W52W7VlYTXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9trz52w52w7vlytxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0253.253] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e488358, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e488358, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e593cfb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTC4X1~1.0IL")) returned 0x7d2c58 [0253.253] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e488358, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e488358, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e593cfb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTC4X1~1.0IL")) returned 0 [0253.253] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0253.253] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0253.255] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0253.255] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8f287, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ef8f287, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f2b03ec, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC5X1~1.0IL")) returned 1 [0253.255] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.255] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwT5NR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwt5nr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.256] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0253.256] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.256] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.357] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0253.357] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0253.358] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.382] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.393] CloseHandle (hObject=0x204) returned 1 [0253.393] CloseHandle (hObject=0x1fc) returned 1 [0253.393] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwT5NR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwt5nr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0253.394] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwT5NR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwt5nr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0253.394] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8f287, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ef8f287, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f2b03ec, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC5X1~1.0IL")) returned 0x7d3018 [0253.395] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ef8f287, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ef8f287, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f2b03ec, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTC5X1~1.0IL")) returned 0 [0253.395] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0253.395] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0253.396] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTc5X19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtc5x19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pncqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0253.396] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e30ab87, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e30ab87, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e4620b2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTCWX1~1.0IL")) returned 1 [0253.397] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.397] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9TRz52W52W7VlYTXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9trz52w52w7vlytxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.397] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0253.398] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.398] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.513] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0253.513] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0253.514] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.537] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.549] CloseHandle (hObject=0x1fc) returned 1 [0253.549] CloseHandle (hObject=0x204) returned 1 [0253.549] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9TRz52W52W7VlYTXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9trz52w52w7vlytxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0253.550] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9TRz52W52W7VlYTXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9trz52w52w7vlytxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0253.551] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e30ab87, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e30ab87, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e4620b2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTCWX1~1.0IL")) returned 0x7d2a18 [0253.551] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e30ab87, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e30ab87, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e4620b2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTCWX1~1.0IL")) returned 0 [0253.551] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0253.551] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0253.552] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoSG96ZHVyYXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcwx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaosg96zhvyyxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0253.553] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e593cfb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e593cfb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e81bb38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTCYX1~1.0IL")) returned 1 [0253.553] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.553] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM55zMjU1ZF2KMmN53GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm55zmju1zf2kmmn53gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.554] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0253.554] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.554] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.621] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0253.621] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0253.622] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.645] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.658] CloseHandle (hObject=0x204) returned 1 [0253.658] CloseHandle (hObject=0x1fc) returned 1 [0253.659] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM55zMjU1ZF2KMmN53GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm55zmju1zf2kmmn53gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0253.660] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM55zMjU1ZF2KMmN53GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm55zmju1zf2kmmn53gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0253.660] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e593cfb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e593cfb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e81bb38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTCYX1~1.0IL")) returned 0x7d2ad8 [0253.660] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e593cfb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e593cfb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e81bb38, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTCYX1~1.0IL")) returned 0 [0253.660] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0253.660] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0253.662] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTcyX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtcyx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0253.662] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e81bb38, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e81bb38, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e926d13, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTCZX1~1.0IL")) returned 1 [0253.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.662] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM55zMjU1ZF2KMmN53GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm55zmju1zf2kmmn53gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.663] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0253.663] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.663] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.727] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0253.727] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0253.728] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.752] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.763] CloseHandle (hObject=0x1fc) returned 1 [0253.763] CloseHandle (hObject=0x204) returned 1 [0253.763] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM55zMjU1ZF2KMmN53GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm55zmju1zf2kmmn53gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0253.764] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM55zMjU1ZF2KMmN53GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm55zmju1zf2kmmn53gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0253.765] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e81bb38, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e81bb38, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e926d13, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTCZX1~1.0IL")) returned 0x7d2c58 [0253.765] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e81bb38, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e81bb38, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e926d13, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTCZX1~1.0IL")) returned 0 [0253.765] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0253.765] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0253.766] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTczX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2I3255dXJ2cylf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtczx19d3256zwn01w96c19dzw4sdw42cl9usudpic2i3255dxj2cylf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0253.766] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2b03ec, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f2b03ec, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f3bb2b6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTDFX0~1.0IL")) returned 1 [0253.767] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.767] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVR5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvr5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.768] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0253.768] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.768] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0253.881] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0253.881] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0253.882] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0253.907] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0253.918] CloseHandle (hObject=0x204) returned 1 [0253.918] CloseHandle (hObject=0x1fc) returned 1 [0253.918] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVR5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvr5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0253.919] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVR5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvr5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0253.919] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2b03ec, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f2b03ec, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f3bb2b6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTDFX0~1.0IL")) returned 0x7d3018 [0253.919] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f2b03ec, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f2b03ec, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f3bb2b6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTDFX0~1.0IL")) returned 0 [0253.919] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0253.919] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0253.921] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtdfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0253.921] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681b945f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x681b945f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x683a916f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE0X1~1.0IL")) returned 1 [0253.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0253.921] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM5YzQ0JUWVc0MllXUnZj1W4mMVRFNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm5yzq0juwvc0mllxunzj1w4mmvrfnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0253.922] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0253.922] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0253.922] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.020] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0254.020] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0254.021] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.044] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.055] CloseHandle (hObject=0x1fc) returned 1 [0254.055] CloseHandle (hObject=0x204) returned 1 [0254.055] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM5YzQ0JUWVc0MllXUnZj1W4mMVRFNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm5yzq0juwvc0mllxunzj1w4mmvrfnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0254.056] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM5YzQ0JUWVc0MllXUnZj1W4mMVRFNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm5yzq0juwvc0mllxunzj1w4mmvrfnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0254.056] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681b945f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x681b945f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x683a916f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE0X1~1.0IL")) returned 0x7d29d8 [0254.056] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x681b945f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x681b945f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x683a916f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE0X1~1.0IL")) returned 0 [0254.056] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0254.057] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0254.058] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE0X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte0x19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0254.058] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683a916f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x683a916f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x685269c0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTE1X1~1.0IL")) returned 1 [0254.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGM0ds7llTQ5ZjM1J2M21sM5lDM5ZjM1J2M21sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgm0ds7lltq5zjm1j2m21sm5ldm5zjm1j2m21sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.060] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0254.060] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.060] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.131] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0254.131] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0254.132] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.157] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.168] CloseHandle (hObject=0x204) returned 1 [0254.168] CloseHandle (hObject=0x1fc) returned 1 [0254.168] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGM0ds7llTQ5ZjM1J2M21sM5lDM5ZjM1J2M21sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgm0ds7lltq5zjm1j2m21sm5ldm5zjm1j2m21sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0254.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGM0ds7llTQ5ZjM1J2M21sM5lDM5ZjM1J2M21sM5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgm0ds7lltq5zjm1j2m21sm5ldm5zjm1j2m21sm5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0254.169] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683a916f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x683a916f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x685269c0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTE1X1~1.0IL")) returned 0x7d2998 [0254.170] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683a916f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x683a916f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x685269c0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTE1X1~1.0IL")) returned 0 [0254.170] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0254.170] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0254.171] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE1X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSBFc3Rv3ml2IC2Fc3Rv3ml2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte1x19d3256zwn01w96c19dzw4sdw42cl9f3glzysbfc3rv3ml2ic2fc3rv3ml2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0254.171] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x685269c0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x685269c0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x687fb85c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE2X1~1.0IL")) returned 1 [0254.172] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.172] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGVFZRZ0tFVnp5Rz52MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgvfzrz0tfvnp5rz52mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.173] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0254.173] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.173] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.238] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0254.238] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0254.239] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.262] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.273] CloseHandle (hObject=0x1fc) returned 1 [0254.273] CloseHandle (hObject=0x204) returned 1 [0254.273] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGVFZRZ0tFVnp5Rz52MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgvfzrz0tfvnp5rz52mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0254.274] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGVFZRZ0tFVnp5Rz52MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgvfzrz0tfvnp5rz52mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0254.274] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x685269c0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x685269c0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x687fb85c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE2X1~1.0IL")) returned 0x7d2c18 [0254.274] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x685269c0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x685269c0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x687fb85c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE2X1~1.0IL")) returned 0 [0254.274] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0254.275] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0254.276] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE2X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte2x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0254.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687fb85c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x687fb85c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6892cb46, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE3X1~1.0IL")) returned 1 [0254.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGVFZRZ0tFVnp5Rz52MVdFcFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgvfzrz0tfvnp5rz52mvdfcfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.277] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0254.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.278] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.379] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0254.379] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0254.380] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.403] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.414] CloseHandle (hObject=0x204) returned 1 [0254.414] CloseHandle (hObject=0x1fc) returned 1 [0254.414] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGVFZRZ0tFVnp5Rz52MVdFcFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgvfzrz0tfvnp5rz52mvdfcfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0254.415] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGVFZRZ0tFVnp5Rz52MVdFcFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgvfzrz0tfvnp5rz52mvdfcfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0254.415] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687fb85c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x687fb85c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6892cb46, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE3X1~1.0IL")) returned 0x7d2998 [0254.416] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x687fb85c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x687fb85c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6892cb46, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE3X1~1.0IL")) returned 0 [0254.416] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0254.416] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0254.417] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE3X19D3256ZWN01W96c19DZW4sdW42cl9FTVQgKEVzdG961WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte3x19d3256zwn01w96c19dzw4sdw42cl9ftvqgkevzdg961wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0254.417] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67be9830, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67be9830, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67d40d10, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE4X1~1.0IL")) returned 1 [0254.418] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.418] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SV3dnVTJGc2RtRjUzM0lwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sv3dnvtjgc2rtrjuzm0lwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.418] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0254.419] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.419] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.485] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0254.485] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0254.486] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.510] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.521] CloseHandle (hObject=0x1fc) returned 1 [0254.521] CloseHandle (hObject=0x204) returned 1 [0254.521] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SV3dnVTJGc2RtRjUzM0lwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sv3dnvtjgc2rtrjuzm0lwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0254.522] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SV3dnVTJGc2RtRjUzM0lwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sv3dnvtjgc2rtrjuzm0lwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0254.523] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67be9830, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67be9830, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67d40d10, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE4X1~1.0IL")) returned 0x7d2cd8 [0254.523] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67be9830, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67be9830, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67d40d10, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTE4X1~1.0IL")) returned 0 [0254.523] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0254.523] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0254.524] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0254.525] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6892cb46, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6892cb46, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68a5f4d6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE4X1~2.0IL")) returned 1 [0254.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9SWE4wMzI1cFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9swe4wmzi1cflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.526] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0254.526] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.526] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.593] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0254.593] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0254.594] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.618] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.801] CloseHandle (hObject=0x204) returned 1 [0254.801] CloseHandle (hObject=0x1fc) returned 1 [0254.802] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9SWE4wMzI1cFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9swe4wmzi1cflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0254.802] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9SWE4wMzI1cFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9swe4wmzi1cflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0254.803] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6892cb46, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6892cb46, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68a5f4d6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE4X1~2.0IL")) returned 0x7d2998 [0254.803] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6892cb46, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6892cb46, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68a5f4d6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE4X1~2.0IL")) returned 0 [0254.803] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0254.803] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0254.804] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0254.804] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a5f4d6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68a5f4d6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68c27a66, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE5X1~1.0IL")) returned 1 [0254.805] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.805] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9SWE4wMzI1cFlT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9swe4wmzi1cflt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.806] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0254.806] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.806] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0254.878] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0254.879] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0254.880] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0254.903] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0254.914] CloseHandle (hObject=0x1fc) returned 1 [0254.914] CloseHandle (hObject=0x204) returned 1 [0254.915] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9SWE4wMzI1cFlT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9swe4wmzi1cflt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0254.916] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03E1pQW9SWE4wMzI1cFlT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03e1pqw9swe4wmzi1cflt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0254.916] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a5f4d6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68a5f4d6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68c27a66, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE5X1~1.0IL")) returned 0x7d2a58 [0254.916] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a5f4d6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68a5f4d6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68c27a66, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTE5X1~1.0IL")) returned 0 [0254.916] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0254.916] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0254.918] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTE5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lMiAoRXN0325pYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mte5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lmiaorxn0325pyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0254.918] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a1fd89, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67a1fd89, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67bc356d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTEWX1~1.0IL")) returned 1 [0254.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0254.918] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SV3dnVTJGc2RtRjUzM0lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sv3dnvtjgc2rtrjuzm0lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0254.919] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0254.919] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0254.919] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.019] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0255.019] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0255.021] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.044] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.055] CloseHandle (hObject=0x204) returned 1 [0255.055] CloseHandle (hObject=0x1fc) returned 1 [0255.056] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SV3dnVTJGc2RtRjUzM0lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sv3dnvtjgc2rtrjuzm0lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0255.057] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SV3dnVTJGc2RtRjUzM0lwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sv3dnvtjgc2rtrjuzm0lwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0255.057] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a1fd89, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67a1fd89, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67bc356d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTEWX1~1.0IL")) returned 0x7d2998 [0255.057] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67a1fd89, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67a1fd89, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67bc356d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTEWX1~1.0IL")) returned 0 [0255.057] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0255.057] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0255.059] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEwX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoRWwgU2FsdmF533IpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtewx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaorwwgu2fsdmf533ipx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0255.059] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d66f32, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67d66f32, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67f0a989, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTEYX1~1.0IL")) returned 1 [0255.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.059] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyRjNDQlRZVzQyWVdSdmNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyrjndqlrzvzqywvdsdmnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.060] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0255.060] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.060] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.125] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0255.125] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0255.126] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.151] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.162] CloseHandle (hObject=0x1fc) returned 1 [0255.162] CloseHandle (hObject=0x204) returned 1 [0255.163] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyRjNDQlRZVzQyWVdSdmNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyrjndqlrzvzqywvdsdmnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0255.164] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyRjNDQlRZVzQyWVdSdmNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyrjndqlrzvzqywvdsdmnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0255.164] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d66f32, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67d66f32, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67f0a989, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTEYX1~1.0IL")) returned 0x7d2c18 [0255.164] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67d66f32, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67d66f32, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x67f0a989, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTEYX1~1.0IL")) returned 0 [0255.164] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0255.164] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0255.165] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mteyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0255.166] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f0a989, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67f0a989, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x681b945f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTEZX1~1.0IL")) returned 1 [0255.166] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.166] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRF7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM5YzQ0JUWVc0MllXUnZj1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrf7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm5yzq0juwvc0mllxunzj1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.167] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0255.167] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.167] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.233] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0255.233] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0255.234] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.258] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.269] CloseHandle (hObject=0x204) returned 1 [0255.269] CloseHandle (hObject=0x1fc) returned 1 [0255.269] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRF7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM5YzQ0JUWVc0MllXUnZj1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrf7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm5yzq0juwvc0mllxunzj1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0255.270] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRF7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM5YzQ0JUWVc0MllXUnZj1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrf7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm5yzq0juwvc0mllxunzj1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0255.270] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f0a989, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67f0a989, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x681b945f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTEZX1~1.0IL")) returned 0x7d2b58 [0255.270] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67f0a989, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x67f0a989, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x681b945f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTEZX1~1.0IL")) returned 0 [0255.270] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0255.270] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0255.272] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTEzX19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2F3CBTYW42YWRvcilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtezx19d3256zwn01w96c19dzw4sdw42cl9usudpic2f3cbtyw42ywrvcilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0255.272] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c27a66, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68c27a66, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68d7edbb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTFFX0~1.0IL")) returned 1 [0255.272] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.272] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjV5S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjv5s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.273] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0255.273] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.273] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.374] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0255.374] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0255.375] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.399] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.411] CloseHandle (hObject=0x1fc) returned 1 [0255.411] CloseHandle (hObject=0x204) returned 1 [0255.411] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjV5S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjv5s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0255.412] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjV5S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjv5s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0255.412] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c27a66, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68c27a66, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68d7edbb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTFFX0~1.0IL")) returned 0x7d2c18 [0255.413] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68c27a66, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68c27a66, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68d7edbb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTFFX0~1.0IL")) returned 0 [0255.413] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0255.413] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0255.414] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtffx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0255.414] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9453ab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f9453ab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fb5b40f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG0X1~1.0IL")) returned 1 [0255.415] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.415] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7VZHOTZ1UzFXMzJSMlptOTZ1U0FvU0c5Nlp5Q5wzMjV6SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7vzhotz1uzfxmzjsmlptotz1u0fvu0c5nlp5q5wzmjv6suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0255.415] CloseHandle (hObject=0x204) returned 1 [0255.415] CloseHandle (hObject=0xffffffff) returned 1 [0255.415] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7VZHOTZ1UzFXMzJSMlptOTZ1U0FvU0c5Nlp5Q5wzMjV6SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7vzhotz1uzfxmzjsmlptotz1u0fvu0c5nlp5q5wzmjv6suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0255.415] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7VZHOTZ1UzFXMzJSMlptOTZ1U0FvU0c5Nlp5Q5wzMjV6SUZOQlVp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7vzhotz1uzfxmzjsmlptotz1u0fvu0c5nlp5q5wzmjv6suzoqlvp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0255.415] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9453ab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f9453ab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fb5b40f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG0X1~1.0IL")) returned 0x7d2ad8 [0255.416] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9453ab, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f9453ab, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fb5b40f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG0X1~1.0IL")) returned 0 [0255.416] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0255.416] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0255.417] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg0X19D3256ZWN01W96c19DZW4sdW42cl9T3WFyVG96ZS1W32R2Zm96ZSAoSG96ZyBL325nIFNBUilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg0x19d3256zwn01w96c19dzw4sdw42cl9t3wfyvg96zs1w32r2zm96zsaosg96zybl325nifnbuilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0255.417] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb5b40f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fb5b40f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fc66519, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x6e004c, dwReserved1=0x790042, cFileName="MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTG1X1~1.0IL")) returned 1 [0255.417] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.418] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJRTI4M215MmN6NWdLRTI4M215MmN6NXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljrti4m215mmn6nwdlrti4m215mmn6nxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.418] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0255.418] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.419] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.485] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0255.485] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0255.486] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.510] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.521] CloseHandle (hObject=0x204) returned 1 [0255.521] CloseHandle (hObject=0x1fc) returned 1 [0255.521] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJRTI4M215MmN6NWdLRTI4M215MmN6NXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljrti4m215mmn6nwdlrti4m215mmn6nxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0255.522] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJRTI4M215MmN6NWdLRTI4M215MmN6NXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljrti4m215mmn6nwdlrti4m215mmn6nxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0255.522] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb5b40f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fb5b40f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fc66519, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTG1X1~1.0IL")) returned 0x7d2b18 [0255.523] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fb5b40f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fb5b40f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fc66519, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTG1X1~1.0IL")) returned 0 [0255.523] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0255.523] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0255.524] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg1X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIE213md2cn5gKE213md2cn5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg1x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yie213md2cn5gke213md2cn5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0255.524] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd71493, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fd71493, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fea27ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG2X1~1.0IL")) returned 1 [0255.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.525] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVd5NVlYSWdWR1ZzWld0djNTQW9TSFY2WjJG7TdT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvd5nvlyswdwr1zzwld0djntqw9tsfy2wjjg7tdt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.526] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0255.526] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.526] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.592] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0255.592] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0255.593] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.616] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.628] CloseHandle (hObject=0x1fc) returned 1 [0255.628] CloseHandle (hObject=0x204) returned 1 [0255.628] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVd5NVlYSWdWR1ZzWld0djNTQW9TSFY2WjJG7TdT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvd5nvlyswdwr1zzwld0djntqw9tsfy2wjjg7tdt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0255.629] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOWVd5NVlYSWdWR1ZzWld0djNTQW9TSFY2WjJG7TdT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlowvd5nvlyswdwr1zzwld0djntqw9tsfy2wjjg7tdt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0255.629] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd71493, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fd71493, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fea27ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG2X1~1.0IL")) returned 0x7d2a58 [0255.629] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fd71493, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fd71493, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6fea27ca, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG2X1~1.0IL")) returned 0 [0255.629] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0255.629] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0255.631] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg2X19D3256ZWN01W96c19DZW4sdW42cl9NYWd5YXIgVGVsZWtv3SAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg2x19d3256zwn01w96c19dzw4sdw42cl9nywd5yxigvgvszwtv3saoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0255.631] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fea27ca, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fea27ca, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7004622c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG3X1~1.0IL")) returned 1 [0255.631] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.631] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JJVlNB31NIVjZ1M5Z5N1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jjvlnb31nivjz1m5z5n1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.632] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0255.632] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.632] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.734] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0255.734] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0255.735] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.763] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0255.774] CloseHandle (hObject=0x204) returned 1 [0255.774] CloseHandle (hObject=0x1fc) returned 1 [0255.774] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JJVlNB31NIVjZ1M5Z5N1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jjvlnb31nivjz1m5z5n1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0255.775] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JJVlNB31NIVjZ1M5Z5N1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jjvlnb31nivjz1m5z5n1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0255.775] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fea27ca, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fea27ca, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7004622c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG3X1~1.0IL")) returned 0x7d3098 [0255.776] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fea27ca, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6fea27ca, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7004622c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG3X1~1.0IL")) returned 0 [0255.776] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0255.776] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0255.777] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg3X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg3x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0255.777] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4ec715, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f4ec715, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f61da7f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTG4X1~1.0IL")) returned 1 [0255.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0255.778] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEVFUyTElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlevfuyteldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0255.779] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0255.779] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0255.779] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0255.926] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0255.926] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0255.927] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0255.991] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.003] CloseHandle (hObject=0x1fc) returned 1 [0256.004] CloseHandle (hObject=0x204) returned 1 [0256.004] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEVFUyTElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlevfuyteldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0256.005] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEVFUyTElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlevfuyteldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.005] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4ec715, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f4ec715, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f61da7f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTG4X1~1.0IL")) returned 0x7d29d8 [0256.005] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f4ec715, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f4ec715, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f61da7f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTG4X1~1.0IL")) returned 0 [0256.005] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0256.005] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0256.007] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9DTU2LIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9dtu2lic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0256.007] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7004622c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7004622c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x701c3972, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG4X1~2.0IL")) returned 1 [0256.007] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.007] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JJVlNB31NIVjZ1M5Z5N1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jjvlnb31nivjz1m5z5n1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.008] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0256.008] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.008] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.070] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0256.070] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0256.071] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.093] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.105] CloseHandle (hObject=0x204) returned 1 [0256.105] CloseHandle (hObject=0x1fc) returned 1 [0256.105] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JJVlNB31NIVjZ1M5Z5N1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jjvlnb31nivjz1m5z5n1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0256.106] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JJVlNB31NIVjZ1M5Z5N1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jjvlnb31nivjz1m5z5n1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.106] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7004622c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7004622c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x701c3972, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG4X1~2.0IL")) returned 0x7d2918 [0256.107] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7004622c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7004622c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x701c3972, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG4X1~2.0IL")) returned 0 [0256.107] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0256.107] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0256.108] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBIVSAoSHV6Z2Fy7Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbivsaoshv6z2fy7slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0256.108] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c3972, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x701c3972, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x703b37b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG5X1~1.0IL")) returned 1 [0256.109] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.109] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.110] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0256.110] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.110] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.176] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0256.176] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0256.177] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.201] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.212] CloseHandle (hObject=0x1fc) returned 1 [0256.212] CloseHandle (hObject=0x204) returned 1 [0256.212] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0256.213] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnNVg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnvg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.213] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c3972, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x701c3972, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x703b37b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG5X1~1.0IL")) returned 0x7d29d8 [0256.213] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x701c3972, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x701c3972, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x703b37b0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTG5X1~1.0IL")) returned 0 [0256.213] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0256.213] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0256.215] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTg5X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtg5x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0256.215] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3bb2b6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f3bb2b6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f4c648f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGWX1~1.0IL")) returned 1 [0256.215] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.215] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTlNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtlnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.216] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0256.216] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.217] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.281] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0256.281] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0256.283] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.306] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.317] CloseHandle (hObject=0x204) returned 1 [0256.317] CloseHandle (hObject=0x1fc) returned 1 [0256.317] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTlNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtlnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0256.322] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRnd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D26SUMySTMyNW5JRXR2M21jZ1UwRlNLVjlwTlNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d26sumystmynw5jrxr2m21jz1uwrlnlvjlwtlnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0256.322] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3bb2b6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f3bb2b6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f4c648f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGWX1~1.0IL")) returned 0x7d3018 [0256.322] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f3bb2b6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f3bb2b6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f4c648f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGWX1~1.0IL")) returned 0 [0256.322] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0256.322] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0256.324] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgwX19D3256ZWN01W96c19DZW4sdW42cl8zIC2I325nIEtv3mcgU0FSKV9pNSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgwx19d3256zwn01w96c19dzw4sdw42cl8zic2i325nietv3mcgu0fskv9pnsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0256.324] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61da7f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f61da7f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f728810, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGYX1~1.0IL")) returned 1 [0256.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.324] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRUTBOWElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrutboweldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.325] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0256.325] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.325] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.424] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0256.424] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0256.425] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.450] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.462] CloseHandle (hObject=0x1fc) returned 1 [0256.462] CloseHandle (hObject=0x204) returned 1 [0256.462] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRUTBOWElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrutboweldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0256.463] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRUTBOWElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrutboweldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.463] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61da7f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f61da7f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f728810, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGYX1~1.0IL")) returned 0x7d3018 [0256.463] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f61da7f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f61da7f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f728810, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGYX1~1.0IL")) returned 0 [0256.463] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0256.463] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0256.465] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgyX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgyx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0256.465] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f728810, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f728810, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f9453ab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGZX1~1.0IL")) returned 1 [0256.465] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.465] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRUTBOWElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrutboweldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.466] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0256.466] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.466] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.532] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0256.532] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0256.535] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.560] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.572] CloseHandle (hObject=0x204) returned 1 [0256.572] CloseHandle (hObject=0x1fc) returned 1 [0256.572] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRUTBOWElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrutboweldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0256.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlRUTBOWElDM55zMjV6SUV0djNtY2dVMEZTS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlrutboweldm55zmjv6suv0djnty2dvmezts1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.573] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f728810, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f728810, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f9453ab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGZX1~1.0IL")) returned 0x7d2ad8 [0256.573] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f728810, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6f728810, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6f9453ab, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTGZX1~1.0IL")) returned 0 [0256.573] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0256.574] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0256.575] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTgzX19D3256ZWN01W96c19DZW4sdW42cl9QQ0NXIC2I325nIEtv3mcgU0FSKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtgzx19d3256zwn01w96c19dzw4sdw42cl9qq0nxic2i325nietv3mcgu0fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0256.575] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69459bdc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69459bdc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69564a64, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI0X1~1.0IL")) returned 1 [0256.575] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.576] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0256.576] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.577] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.642] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0256.642] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0256.643] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.667] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.678] CloseHandle (hObject=0x1fc) returned 1 [0256.678] CloseHandle (hObject=0x204) returned 1 [0256.679] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0256.680] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.680] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69459bdc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69459bdc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69564a64, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI0X1~1.0IL")) returned 0x7d2b58 [0256.680] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69459bdc, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69459bdc, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69564a64, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI0X1~1.0IL")) returned 0 [0256.680] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0256.680] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0256.683] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0256.683] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69564a64, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69564a64, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6972e517, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI1X1~1.0IL")) returned 1 [0256.684] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.684] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dGNlpITWdUVzlpMVc0MFpXNG413T52SUVG1UlDM5c4VzVzWVc1NUtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dgnlpitwduvzlpmvc0mfpxng413t52suvg1uldm5c4vzvzwvc1nutwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0256.684] CloseHandle (hObject=0x204) returned 1 [0256.684] CloseHandle (hObject=0xffffffff) returned 1 [0256.684] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dGNlpITWdUVzlpMVc0MFpXNG413T52SUVG1UlDM5c4VzVzWVc1NUtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dgnlpitwduvzlpmvc0mfpxng413t52suvg1uldm5c4vzvzwvc1nutwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0256.684] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dGNlpITWdUVzlpMVc0MFpXNG413T52SUVG1UlDM5c4VzVzWVc1NUtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dgnlpitwduvzlpmvc0mfpxng413t52suvg1uldm5c4vzvzwvc1nutwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0256.684] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69564a64, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69564a64, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6972e517, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI1X1~1.0IL")) returned 0x7d3018 [0256.684] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69564a64, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69564a64, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6972e517, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI1X1~1.0IL")) returned 0 [0256.684] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0256.685] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0256.686] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI1X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti1x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0256.686] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6972e517, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6972e517, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x698fffc9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x480063, dwReserved1=0x76004a, cFileName="MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI2X1~1.0IL")) returned 1 [0256.686] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.686] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dGNlpITWdUVzlpMVc0MFpXNG413T52SUVG1UlDM5c4VzVzWVc1NUtWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dgnlpitwduvzlpmvc0mfpxng413t52suvg1uldm5c4vzvzwvc1nutwoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0256.686] CloseHandle (hObject=0x204) returned 1 [0256.687] CloseHandle (hObject=0xffffffff) returned 1 [0256.687] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dGNlpITWdUVzlpMVc0MFpXNG413T52SUVG1UlDM5c4VzVzWVc1NUtWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dgnlpitwduvzlpmvc0mfpxng413t52suvg1uldm5c4vzvzwvc1nutwoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0256.687] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dGNlpITWdUVzlpMVc0MFpXNG413T52SUVG1UlDM5c4VzVzWVc1NUtWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dgnlpitwduvzlpmvc0mfpxng413t52suvg1uldm5c4vzvzwvc1nutwoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0256.687] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6972e517, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6972e517, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x698fffc9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI2X1~1.0IL")) returned 0x7d2b58 [0256.687] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6972e517, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6972e517, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x698fffc9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI2X1~1.0IL")) returned 0 [0256.687] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0256.687] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0256.689] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI2X19D3256ZWN01W96c19DZW4sdW42cl9B3GF6ZHMgTW9i1W40ZW4lZm96IEFiIC2G1W5sYW55KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti2x19d3256zwn01w96c19dzw4sdw42cl9b3gf6zhmgtw9i1w40zw4lzm96iefiic2g1w5syw55kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0256.689] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698fffc9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x698fffc9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69b636bd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x480063, dwReserved1=0x76004a, cFileName="MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTI3X1~1.0IL")) returned 1 [0256.689] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.689] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFVDVFZ0tFWnAz3TQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfvdvfz0tfwnaz3tqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.690] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0256.690] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.690] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.792] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0256.792] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0256.793] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.825] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.838] CloseHandle (hObject=0x204) returned 1 [0256.838] CloseHandle (hObject=0x1fc) returned 1 [0256.839] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFVDVFZ0tFWnAz3TQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfvdvfz0tfwnaz3tqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0256.840] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFVDVFZ0tFWnAz3TQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfvdvfz0tfwnaz3tqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0256.841] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698fffc9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x698fffc9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69b636bd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTI3X1~1.0IL")) returned 0x7d3018 [0256.841] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x698fffc9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x698fffc9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69b636bd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTI3X1~1.0IL")) returned 0 [0256.841] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0256.841] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0256.843] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI3X19D3256ZWN01W96c19DZW4sdW42cl9ET5EgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti3x19d3256zwn01w96c19dzw4sdw42cl9et5egkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0256.844] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efd6c5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68efd6c5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69079bd0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI4X1~1.0IL")) returned 1 [0256.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0256.844] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMMVdSMjNtVjBJQzJHMVdwcEtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmmvdsmjntvjbjqzjhmvdwcetwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0256.854] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0256.854] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0256.855] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0256.926] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0256.926] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0256.927] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0256.984] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.048] CloseHandle (hObject=0x1fc) returned 1 [0257.048] CloseHandle (hObject=0x204) returned 1 [0257.048] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMMVdSMjNtVjBJQzJHMVdwcEtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmmvdsmjntvjbjqzjhmvdwcetwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0257.049] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlMMVdSMjNtVjBJQzJHMVdwcEtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlmmvdsmjntvjbjqzjhmvdwcetwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0257.049] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efd6c5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68efd6c5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69079bd0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI4X1~1.0IL")) returned 0x7d29d8 [0257.050] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68efd6c5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68efd6c5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69079bd0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTI4X1~1.0IL")) returned 0 [0257.050] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0257.050] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0257.051] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19D3256ZWN01W96c19DZW4sdW42cl9L1WR23mV0IC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19d3256zwn01w96c19dzw4sdw42cl9l1wr23mv0ic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0257.051] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b636bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69b636bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69c6d401, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI4X1~2.0IL")) returned 1 [0257.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.052] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.053] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d0 [0257.053] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.053] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.119] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0257.119] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0257.120] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.144] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.155] CloseHandle (hObject=0x204) returned 1 [0257.155] CloseHandle (hObject=0x1fc) returned 1 [0257.155] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0257.156] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0257.156] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b636bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69b636bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69c6d401, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI4X1~2.0IL")) returned 0x7d3018 [0257.157] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69b636bd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69b636bd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69c6d401, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI4X1~2.0IL")) returned 0 [0257.157] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0257.157] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0257.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI4X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti4x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0257.170] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6d401, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69c6d401, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69d9e6ce, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI5X1~1.0IL")) returned 1 [0257.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGM0ds7llTQW9S3Ww2M0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgm0ds7lltqw9s3ww2m0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.171] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0257.171] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.171] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.237] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0257.237] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0257.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.262] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.272] CloseHandle (hObject=0x1fc) returned 1 [0257.272] CloseHandle (hObject=0x204) returned 1 [0257.273] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGM0ds7llTQW9S3Ww2M0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgm0ds7lltqw9s3ww2m0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0257.274] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGM0ds7llTQW9S3Ww2M0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgm0ds7lltqw9s3ww2m0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0257.274] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6d401, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69c6d401, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69d9e6ce, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI5X1~1.0IL")) returned 0x7d3018 [0257.274] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69c6d401, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69c6d401, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69d9e6ce, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTI5X1~1.0IL")) returned 0 [0257.274] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0257.274] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0257.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTI5X19D3256ZWN01W96c19DZW4sdW42cl9F3GlzYSAoRml63GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mti5x19d3256zwn01w96c19dzw4sdw42cl9f3glzysaorml63gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0257.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68da507e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68da507e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68ed6367, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTIWX1~1.0IL")) returned 1 [0257.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.277] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHVHlB31JtRn5zMlVnU12Oc1lXNTVj7W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhvhlb31jtrn5zmlvnu12oc1lxntvj7w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.278] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0257.278] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.278] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.341] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0257.342] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0257.343] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.365] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.377] CloseHandle (hObject=0x204) returned 1 [0257.377] CloseHandle (hObject=0x1fc) returned 1 [0257.377] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHVHlB31JtRn5zMlVnU12Oc1lXNTVj7W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhvhlb31jtrn5zmlvnu12oc1lxntvj7w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0257.378] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHVHlB31JtRn5zMlVnU12Oc1lXNTVj7W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhvhlb31jtrn5zmlvnu12oc1lxntvj7w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0257.378] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68da507e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68da507e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68ed6367, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTIWX1~1.0IL")) returned 0x7d3018 [0257.378] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68da507e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x68da507e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x68ed6367, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTIWX1~1.0IL")) returned 0 [0257.378] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0257.378] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0257.380] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIwX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBGTyAoRmFy32UgSXNsYW55cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiwx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbgtyaormfy32ugsxnsyw55cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0257.380] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69079bd0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69079bd0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x692dd8d7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTIYX1~1.0IL")) returned 1 [0257.380] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.380] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHMVdwcElDM5c4V3BwS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhmvdwceldm5c4v3bws1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.381] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0257.381] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.381] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.479] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0257.479] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0257.481] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.503] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.514] CloseHandle (hObject=0x1fc) returned 1 [0257.514] CloseHandle (hObject=0x204) returned 1 [0257.515] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHMVdwcElDM5c4V3BwS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhmvdwceldm5c4v3bws1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0257.515] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHMVdwcElDM5c4V3BwS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhmvdwceldm5c4v3bws1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0257.516] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69079bd0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69079bd0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x692dd8d7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTIYX1~1.0IL")) returned 0x7d29d8 [0257.516] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69079bd0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69079bd0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x692dd8d7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTIYX1~1.0IL")) returned 0 [0257.516] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0257.516] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0257.518] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtiyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0257.518] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692dd8d7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x692dd8d7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69459bdc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTIZX1~1.0IL")) returned 1 [0257.518] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.518] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHMVdwcElDM5c4V3BwS1Y5cE1TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhmvdwceldm5c4v3bws1y5ce1tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.519] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0257.519] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.519] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.584] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0257.584] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0257.585] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.609] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.620] CloseHandle (hObject=0x204) returned 1 [0257.620] CloseHandle (hObject=0x1fc) returned 1 [0257.620] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHMVdwcElDM5c4V3BwS1Y5cE1TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhmvdwceldm5c4v3bws1y5ce1tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0257.621] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JHMVdwcElDM5c4V3BwS1Y5cE1TUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jhmvdwceldm5c4v3bws1y5ce1tuw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0257.621] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692dd8d7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x692dd8d7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69459bdc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTIZX1~1.0IL")) returned 0x7d2ad8 [0257.621] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x692dd8d7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x692dd8d7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69459bdc, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTIZX1~1.0IL")) returned 0 [0257.621] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0257.621] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0257.623] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTIzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBG1WppIC2G1WppKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtizx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbg1wppic2g1wppkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0257.623] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e6ce, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69d9e6ce, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69ef5c72, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTJFX0~1.0IL")) returned 1 [0257.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.623] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjV6S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjv6s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.624] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0257.624] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.624] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.688] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0257.688] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0257.689] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.713] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.724] CloseHandle (hObject=0x1fc) returned 1 [0257.724] CloseHandle (hObject=0x204) returned 1 [0257.724] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjV6S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjv6s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0257.725] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjV6S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjv6s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0257.726] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e6ce, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69d9e6ce, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69ef5c72, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTJFX0~1.0IL")) returned 0x7d3018 [0257.726] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e6ce, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69d9e6ce, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x69ef5c72, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTJFX0~1.0IL")) returned 0 [0257.726] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0257.726] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0257.727] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtjfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0257.727] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711df136, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x711df136, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x712e676a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTLFX0~1.0IL")) returned 1 [0257.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.728] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRsZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFYQndTVVE2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrszlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfyqndtvve2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.728] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0257.729] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.729] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.839] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0257.839] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0257.841] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0257.868] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0257.879] CloseHandle (hObject=0x204) returned 1 [0257.879] CloseHandle (hObject=0x1fc) returned 1 [0257.880] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRsZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFYQndTVVE2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrszlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfyqndtvve2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0257.880] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRsZlgwTmwzRzQ4M0dG7Vg4Qm4j3E5wM1ZO3GRIUnAz3WR6WHlR31g4OUpRME5KU5NsZlFYQndTVVE2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrszlgwtmwzrzq4m0dg7vg4qm4j3e5wm1zo3griunaz3wr6whlr31g4ouprme5ku5nszlfyqndtvve2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0257.881] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711df136, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x711df136, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x712e676a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTLFX0~1.0IL")) returned 0x7d2c98 [0257.881] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x711df136, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x711df136, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x712e676a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTLFX0~1.0IL")) returned 0 [0257.881] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0257.881] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 1 [0257.882] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTlfX0Nl3G413GFyX1BlclNp3VNldHRp3mdzXyQoX19JQ0NJRClfQXBwSUQ6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtlfx0nl3g413gfyx1blclnp3vnldhrp3mdzxyqox19jq0njrclfqxbwsuq6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0257.882] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6b5661, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a6b5661, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a87f52c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTM0X1~1.0IL")) returned 1 [0257.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0257.883] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMzI13GNtRWdLRVpwM200MjNtUXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumzi13gntrwdlrvpwm200mjntuxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0257.884] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0257.884] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0257.884] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0257.985] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0257.986] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0257.987] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.009] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.022] CloseHandle (hObject=0x1fc) returned 1 [0258.022] CloseHandle (hObject=0x204) returned 1 [0258.023] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMzI13GNtRWdLRVpwM200MjNtUXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumzi13gntrwdlrvpwm200mjntuxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0258.024] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMzI13GNtRWdLRVpwM200MjNtUXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumzi13gntrwdlrvpwm200mjntuxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0258.024] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6b5661, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a6b5661, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a87f52c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTM0X1~1.0IL")) returned 0x7d2d58 [0258.024] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a6b5661, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a6b5661, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a87f52c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTM0X1~1.0IL")) returned 0 [0258.024] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0258.024] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0258.026] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM0X19D3256ZWN01W96c19DZW4sdW42cl9T325lcmEgKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm0x19d3256zwn01w96c19dzw4sdw42cl9t325lcmegkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0258.026] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a87f52c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a87f52c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6aa72720, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM1X1~1.0IL")) returned 1 [0258.026] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.026] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMzNWNVozVm4j7UFvUm5KMjNtTm4LVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmznwnvozvm4j7ufvum5kmjnttm4lvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.027] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0258.028] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.028] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.096] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0258.096] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0258.097] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.120] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.131] CloseHandle (hObject=0x204) returned 1 [0258.131] CloseHandle (hObject=0x1fc) returned 1 [0258.131] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMzNWNVozVm4j7UFvUm5KMjNtTm4LVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmznwnvozvm4j7ufvum5kmjnttm4lvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0258.132] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMzNWNVozVm4j7UFvUm5KMjNtTm4LVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmznwnvozvm4j7ufvum5kmjnttm4lvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0258.132] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a87f52c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a87f52c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6aa72720, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM1X1~1.0IL")) returned 0x7d2cd8 [0258.132] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a87f52c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a87f52c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6aa72720, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM1X1~1.0IL")) returned 0 [0258.132] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0258.133] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0258.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM1X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm1x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0258.135] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa72720, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6aa72720, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6acac038, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM2X1~1.0IL")) returned 1 [0258.136] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.136] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMzNWNVozVm4j7UFvUm5KMjNtTm4LVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmznwnvozvm4j7ufvum5kmjnttm4lvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.136] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0258.136] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.137] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.253] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0258.254] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0258.255] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.278] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.289] CloseHandle (hObject=0x1fc) returned 1 [0258.289] CloseHandle (hObject=0x204) returned 1 [0258.289] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMzNWNVozVm4j7UFvUm5KMjNtTm4LVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmznwnvozvm4j7ufvum5kmjnttm4lvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0258.291] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlDMzNWNVozVm4j7UFvUm5KMjNtTm4LVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dldmznwnvozvm4j7ufvum5kmjnttm4lvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0258.291] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa72720, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6aa72720, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6acac038, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM2X1~1.0IL")) returned 0x7d2ad8 [0258.291] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6aa72720, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6aa72720, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6acac038, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM2X1~1.0IL")) returned 0 [0258.291] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0258.291] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0258.293] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM2X19D3256ZWN01W96c19DZW4sdW42cl9C33V5Z3VlcyAoRnJ23mNlKV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm2x19d3256zwn01w96c19dzw4sdw42cl9c33v5z3vlcyaornj23mnlkv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0258.293] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acac038, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6acac038, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6aee7f8f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTM3X1~1.0IL")) returned 1 [0258.293] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.293] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.294] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0258.294] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.294] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.358] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0258.358] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0258.359] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.383] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.394] CloseHandle (hObject=0x204) returned 1 [0258.394] CloseHandle (hObject=0x1fc) returned 1 [0258.394] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0258.395] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0258.395] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acac038, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6acac038, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6aee7f8f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTM3X1~1.0IL")) returned 0x7d2ad8 [0258.395] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6acac038, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6acac038, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6aee7f8f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTM3X1~1.0IL")) returned 0 [0258.395] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0258.395] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0258.397] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0258.397] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af0dd18, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6af0dd18, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b0d7875, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM4X1~2.0IL")) returned 1 [0258.397] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.398] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlHY21W3ElFMXZZ3W4zWlNB31J6SjIz3U5sS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlhy21w3elfmxzz3w4zwlnb31j6sjiz3u5ss1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.398] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0258.398] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.399] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.463] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0258.463] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0258.464] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.487] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.499] CloseHandle (hObject=0x1fc) returned 1 [0258.499] CloseHandle (hObject=0x204) returned 1 [0258.499] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlHY21W3ElFMXZZ3W4zWlNB31J6SjIz3U5sS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlhy21w3elfmxzz3w4zwlnb31j6sjiz3u5ss1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0258.500] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlHY21W3ElFMXZZ3W4zWlNB31J6SjIz3U5sS1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlhy21w3elfmxzz3w4zwlnb31j6sjiz3u5ss1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0258.500] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af0dd18, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6af0dd18, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b0d7875, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM4X1~2.0IL")) returned 0x7d2b18 [0258.500] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6af0dd18, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6af0dd18, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b0d7875, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTM4X1~2.0IL")) returned 0 [0258.500] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0258.500] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0258.502] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9GcmVlIE1vYmlsZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9gcmvlie1vymlszsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0258.502] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a0bf808, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a0bf808, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a289703, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTM4X1~1.0IL")) returned 1 [0258.502] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.502] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCRDMyMXR5VzVwWTJGMDFXOTZJRTQwW5M0Z0tFWnAz3TQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lcrdmymxr5vzvwwtjgmdfxotzjrtqww5m0z0tfwnaz3tqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.503] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0258.503] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.504] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.573] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0258.573] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0258.575] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.597] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.609] CloseHandle (hObject=0x204) returned 1 [0258.609] CloseHandle (hObject=0x1fc) returned 1 [0258.609] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCRDMyMXR5VzVwWTJGMDFXOTZJRTQwW5M0Z0tFWnAz3TQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lcrdmymxr5vzvwwtjgmdfxotzjrtqww5m0z0tfwnaz3tqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0258.610] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCRDMyMXR5VzVwWTJGMDFXOTZJRTQwW5M0Z0tFWnAz3TQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lcrdmymxr5vzvwwtjgmdfxotzjrtqww5m0z0tfwnaz3tqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0258.610] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a0bf808, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a0bf808, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a289703, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTM4X1~1.0IL")) returned 0x7d3018 [0258.610] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a0bf808, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a0bf808, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a289703, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTM4X1~1.0IL")) returned 0 [0258.610] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0258.610] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0258.612] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM4X19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm4x19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0258.612] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0d7875, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b0d7875, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b22ebed, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTM5X1~1.0IL")) returned 1 [0258.612] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.613] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.613] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0258.613] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.614] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.715] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0258.716] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0258.717] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.739] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.750] CloseHandle (hObject=0x1fc) returned 1 [0258.750] CloseHandle (hObject=0x204) returned 1 [0258.750] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0258.751] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0258.751] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0d7875, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b0d7875, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b22ebed, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTM5X1~1.0IL")) returned 0x7d2ad8 [0258.751] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b0d7875, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b0d7875, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b22ebed, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTM5X1~1.0IL")) returned 0 [0258.752] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0258.752] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0258.753] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTM5X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtm5x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0258.753] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f1bd90, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69f1bd90, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a0bf808, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTMWX1~1.0IL")) returned 1 [0258.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.754] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNd1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnd1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.756] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0258.756] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.757] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.820] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0258.820] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0258.821] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0258.854] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0258.865] CloseHandle (hObject=0x204) returned 1 [0258.865] CloseHandle (hObject=0x1fc) returned 1 [0258.865] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNd1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnd1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0258.866] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRNd1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrnd1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0258.866] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f1bd90, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69f1bd90, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a0bf808, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTMWX1~1.0IL")) returned 0x7d3018 [0258.867] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69f1bd90, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x69f1bd90, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a0bf808, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTMWX1~1.0IL")) returned 0 [0258.867] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0258.867] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0258.868] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0258.868] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a289703, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a289703, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a4ebb17, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTMYX1~1.0IL")) returned 1 [0258.869] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0258.869] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRN7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCRDMyMXR5VzVwWTJGMDFXOTZJRTQwW5M0Z0tFWnAz3TQyM21RcFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lcrdmymxr5vzvwwtjgmdfxotzjrtqww5m0z0tfwnaz3tqym21rcfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0258.870] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0258.870] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0258.870] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0258.934] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0258.934] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0258.936] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.018] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.030] CloseHandle (hObject=0x1fc) returned 1 [0259.030] CloseHandle (hObject=0x204) returned 1 [0259.030] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRN7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCRDMyMXR5VzVwWTJGMDFXOTZJRTQwW5M0Z0tFWnAz3TQyM21RcFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lcrdmymxr5vzvwwtjgmdfxotzjrtqww5m0z0tfwnaz3tqym21rcfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0259.031] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRN7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM3lCRDMyMXR5VzVwWTJGMDFXOTZJRTQwW5M0Z0tFWnAz3TQyM21RcFgyNTRKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim3lcrdmymxr5vzvwwtjgmdfxotzjrtqww5m0z0tfwnaz3tqym21rcfgyntrkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0259.031] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a289703, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a289703, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a4ebb17, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTMYX1~1.0IL")) returned 0x7d3018 [0259.032] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a289703, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a289703, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a4ebb17, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTMYX1~1.0IL")) returned 0 [0259.032] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0259.032] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0259.033] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMyX19D3256ZWN01W96c19DZW4sdW42cl9H3yBD321tdW5pY2F01W96IE40ZC4gKEZp3m423mQpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmyx19d3256zwn01w96c19dzw4sdw42cl9h3ybd321tdw5py2f01w96ie40zc4gkezp3m423mqpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0259.033] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4ebb17, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a4ebb17, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a6b5661, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTMZX1~1.0IL")) returned 1 [0259.034] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.034] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRN7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU5VNZ1UyOTZ17UJHMVc1c1lXNTVJQzJHMVc1c1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu5vnz1uyotz17ujhmvc1c1lxntvjqzjhmvc1c1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.034] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0259.034] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.035] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.097] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0259.097] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0259.098] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.123] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.134] CloseHandle (hObject=0x204) returned 1 [0259.134] CloseHandle (hObject=0x1fc) returned 1 [0259.134] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRN7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU5VNZ1UyOTZ17UJHMVc1c1lXNTVJQzJHMVc1c1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu5vnz1uyotz17ujhmvc1c1lxntvjqzjhmvc1c1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0259.135] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRN7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU5VNZ1UyOTZ17UJHMVc1c1lXNTVJQzJHMVc1c1lXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu5vnz1uyotz17ujhmvc1c1lxntvjqzjhmvc1c1lxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0259.135] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4ebb17, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a4ebb17, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a6b5661, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTMZX1~1.0IL")) returned 0x7d29d8 [0259.135] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a4ebb17, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6a4ebb17, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6a6b5661, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTMZX1~1.0IL")) returned 0 [0259.135] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0259.135] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0259.137] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTMzX19D3256ZWN01W96c19DZW4sdW42cl9UREMgU296ZyBG1W5sYW55IC2G1W5sYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtmzx19d3256zwn01w96c19dzw4sdw42cl9uremgu296zybg1w5syw55ic2g1w5syw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0259.137] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b22ebed, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b22ebed, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b3d272a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTNFX0~1.0IL")) returned 1 [0259.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.137] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVROZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUwS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrozlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuws5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.138] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0259.138] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.138] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.201] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0259.201] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0259.202] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.225] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.235] CloseHandle (hObject=0x1fc) returned 1 [0259.235] CloseHandle (hObject=0x204) returned 1 [0259.235] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVROZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUwS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrozlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuws5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0259.236] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVROZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUwS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrozlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuws5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0259.236] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b22ebed, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b22ebed, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b3d272a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTNFX0~1.0IL")) returned 0x7d3018 [0259.236] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b22ebed, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b22ebed, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b3d272a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTNFX0~1.0IL")) returned 0 [0259.236] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0259.237] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0259.238] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTNfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX250JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtnfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx250jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0259.238] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb9257a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bb9257a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bc9d1f2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ0X1~1.0IL")) returned 1 [0259.238] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.238] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VFU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vfu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.239] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0259.239] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.239] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.302] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0259.302] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0259.303] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.327] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.337] CloseHandle (hObject=0x204) returned 1 [0259.337] CloseHandle (hObject=0x1fc) returned 1 [0259.337] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VFU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vfu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0259.338] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VFU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vfu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0259.338] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb9257a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bb9257a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bc9d1f2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ0X1~1.0IL")) returned 0x7d2a18 [0259.339] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bb9257a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bb9257a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bc9d1f2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ0X1~1.0IL")) returned 0 [0259.339] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0259.339] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0259.340] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TU5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tu5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0259.340] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bc9d1f2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bc9d1f2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bdf475c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ1X1~1.0IL")) returned 1 [0259.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.341] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VF51S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vf51s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.341] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0259.341] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.342] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.441] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0259.441] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0259.442] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.465] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.475] CloseHandle (hObject=0x1fc) returned 1 [0259.475] CloseHandle (hObject=0x204) returned 1 [0259.476] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VF51S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vf51s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0259.477] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VF51S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vf51s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0259.477] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bc9d1f2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bc9d1f2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bdf475c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ1X1~1.0IL")) returned 0x7d2918 [0259.478] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bc9d1f2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bc9d1f2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bdf475c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ1X1~1.0IL")) returned 0 [0259.478] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0259.478] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0259.479] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ1X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TY5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq1x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ty5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0259.479] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be1a70e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6be1a70e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6beff778, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ2X1~1.0IL")) returned 1 [0259.480] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.480] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.480] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0259.480] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.481] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.551] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0259.551] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0259.552] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.575] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.586] CloseHandle (hObject=0x204) returned 1 [0259.586] CloseHandle (hObject=0x1fc) returned 1 [0259.586] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0259.587] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0259.587] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be1a70e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6be1a70e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6beff778, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ2X1~1.0IL")) returned 0x7d2b18 [0259.587] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be1a70e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6be1a70e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6beff778, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ2X1~1.0IL")) returned 0 [0259.587] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0259.587] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0259.589] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ2X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq2x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0259.589] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf25b20, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bf25b20, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c00a928, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ3X1~1.0IL")) returned 1 [0259.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.589] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.590] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0259.590] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.590] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.654] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0259.654] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0259.655] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.679] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.690] CloseHandle (hObject=0x1fc) returned 1 [0259.690] CloseHandle (hObject=0x204) returned 1 [0259.690] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0259.691] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0259.691] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf25b20, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bf25b20, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c00a928, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ3X1~1.0IL")) returned 0x7d2c18 [0259.691] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bf25b20, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6bf25b20, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c00a928, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ3X1~1.0IL")) returned 0 [0259.691] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0259.692] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0259.693] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ3X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq3x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0259.693] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5c2665, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b5c2665, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b6cd683, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ4X1~1.0IL")) returned 1 [0259.693] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.694] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VE51S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4ve51s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.694] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0259.694] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.695] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.809] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0259.809] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0259.811] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.834] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.854] CloseHandle (hObject=0x204) returned 1 [0259.854] CloseHandle (hObject=0x1fc) returned 1 [0259.855] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VE51S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4ve51s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0259.864] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VE51S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4ve51s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0259.864] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5c2665, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b5c2665, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b6cd683, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ4X1~1.0IL")) returned 0x7d3018 [0259.864] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b5c2665, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b5c2665, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b6cd683, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ4X1~1.0IL")) returned 0 [0259.864] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0259.864] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0259.867] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0259.867] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c030815, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c030815, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c1fa6d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ4X1~2.0IL")) returned 1 [0259.869] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.869] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUSTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.870] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0259.870] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.870] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0259.935] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0259.935] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0259.936] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0259.959] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0259.970] CloseHandle (hObject=0x1fc) returned 1 [0259.970] CloseHandle (hObject=0x204) returned 1 [0259.971] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUSTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0259.971] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUSTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfustvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0259.971] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c030815, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c030815, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c1fa6d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ4X1~2.0IL")) returned 0x7d2b58 [0259.972] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c030815, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c030815, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c1fa6d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ4X1~2.0IL")) returned 0 [0259.972] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0259.972] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0259.973] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ4X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TI5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq4x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1ti5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0259.973] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1fa6d1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c1fa6d1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c30556e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ5X1~1.0IL")) returned 1 [0259.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0259.974] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUTTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfuttvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0259.974] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0259.975] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0259.975] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0260.079] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0260.079] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0260.080] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0260.106] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.117] CloseHandle (hObject=0x204) returned 1 [0260.117] CloseHandle (hObject=0x1fc) returned 1 [0260.117] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUTTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfuttvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0260.118] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUUm4JZ0tFWnlZVzVqWlNsZjFUTTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluum4jz0tfwnlzvzvqwlnszjfuttvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0260.119] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1fa6d1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c1fa6d1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c30556e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ5X1~1.0IL")) returned 0x7d2a98 [0260.119] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1fa6d1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c1fa6d1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c30556e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQ5X1~1.0IL")) returned 0 [0260.119] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0260.119] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0260.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQ5X19D3256ZWN01W96c19DZW4sdW42cl9TRlIgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtq5x19d3256zwn01w96c19dzw4sdw42cl9trligkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0260.120] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3d272a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b3d272a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b59c1d3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQWX1~1.0IL")) returned 1 [0260.121] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0260.121] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0260.122] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0260.122] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0260.122] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0260.187] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0260.187] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0260.188] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0260.211] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.222] CloseHandle (hObject=0x1fc) returned 1 [0260.222] CloseHandle (hObject=0x204) returned 1 [0260.222] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0260.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRRd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrrd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0260.223] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3d272a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b3d272a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b59c1d3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQWX1~1.0IL")) returned 0x7d2c18 [0260.223] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b3d272a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b3d272a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6b59c1d3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQWX1~1.0IL")) returned 0 [0260.223] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0260.223] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0260.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQwX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqwx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0260.225] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6f38b5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b6f38b5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ba60cf2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQYX1~1.0IL")) returned 1 [0260.225] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0260.225] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRR7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VE01S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrr7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4ve01s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0260.226] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0260.226] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0260.226] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0260.290] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0260.290] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0260.291] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0260.314] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.325] CloseHandle (hObject=0x204) returned 1 [0260.325] CloseHandle (hObject=0x1fc) returned 1 [0260.326] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRR7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VE01S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrr7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4ve01s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0260.327] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRR7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VE01S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrr7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4ve01s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0260.327] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6f38b5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b6f38b5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ba60cf2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQYX1~1.0IL")) returned 0x7d2c18 [0260.327] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b6f38b5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6b6f38b5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ba60cf2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQYX1~1.0IL")) returned 0 [0260.327] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0260.327] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0260.329] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQyX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TM5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqyx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tm5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0260.329] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba60cf2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ba60cf2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bb9257a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQZX1~1.0IL")) returned 1 [0260.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0260.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRR7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VFE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrr7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vfe1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0260.330] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0260.330] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0260.330] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0260.430] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0260.430] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0260.433] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0260.455] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.466] CloseHandle (hObject=0x1fc) returned 1 [0260.466] CloseHandle (hObject=0x204) returned 1 [0260.466] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRR7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VFE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrr7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vfe1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0260.467] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRR7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLRVp5WVc11lpT3GY4VFE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrr7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlrvp5wvc11lpt3gy4vfe1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0260.468] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba60cf2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ba60cf2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bb9257a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQZX1~1.0IL")) returned 0x7d3018 [0260.468] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ba60cf2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ba60cf2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6bb9257a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTQZX1~1.0IL")) returned 0 [0260.468] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0260.468] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0260.469] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTQzX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKEZyYW5jZSlf1TQ5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtqzx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkezyyw5jzslf1tq5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0260.469] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c30556e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c30556e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c567da1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTRFX0~1.0IL")) returned 1 [0260.470] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0260.470] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRSZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU4S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju4s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0260.470] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0260.471] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0260.471] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0260.537] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0260.537] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0260.538] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0260.569] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.757] CloseHandle (hObject=0x204) returned 1 [0260.757] CloseHandle (hObject=0x1fc) returned 1 [0260.757] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRSZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU4S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju4s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0260.772] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRSZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjU4S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymju4s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0260.781] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c30556e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c30556e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c567da1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTRFX0~1.0IL")) returned 0x7d3018 [0260.787] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c30556e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c30556e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c567da1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTRFX0~1.0IL")) returned 0 [0260.787] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0260.788] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0260.796] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTRfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX251JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtrfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx251jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0260.796] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cbe0122, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cbe0122, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cd11391, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU0X1~1.0IL")) returned 1 [0260.796] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0260.796] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0260.797] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0260.797] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0260.797] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0260.877] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0260.877] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0260.878] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0260.902] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0260.912] CloseHandle (hObject=0x1fc) returned 1 [0260.912] CloseHandle (hObject=0x204) returned 1 [0260.913] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0260.914] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0260.914] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cbe0122, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cbe0122, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cd11391, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU0X1~1.0IL")) returned 0x7d2d58 [0260.914] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cbe0122, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cbe0122, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cd11391, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU0X1~1.0IL")) returned 0 [0260.914] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0260.914] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0260.916] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0260.916] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd11391, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cd11391, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ce1c6ae, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTU1X1~1.0IL")) returned 1 [0260.916] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0260.917] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIMUdGNllTQW9SMjIyM21FcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jimudgnlltqw9smjiym21fcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0260.917] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0260.917] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0260.918] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.023] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0261.023] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0261.025] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.048] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.060] CloseHandle (hObject=0x204) returned 1 [0261.060] CloseHandle (hObject=0x1fc) returned 1 [0261.060] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIMUdGNllTQW9SMjIyM21FcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jimudgnlltqw9smjiym21fcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0261.061] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIMUdGNllTQW9SMjIyM21FcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jimudgnlltqw9smjiym21fcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0261.061] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd11391, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cd11391, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ce1c6ae, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTU1X1~1.0IL")) returned 0x7d3018 [0261.061] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cd11391, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cd11391, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6ce1c6ae, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTU1X1~1.0IL")) returned 0 [0261.061] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0261.061] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0261.063] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU1X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBH1GF6YSAoR2223mEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu1x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbh1gf6ysaor2223mepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0261.063] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce1c6ae, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ce1c6ae, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cf2774c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU2X1~1.0IL")) returned 1 [0261.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMlg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmlg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.064] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0261.064] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.065] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.128] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0261.129] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0261.130] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.155] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.166] CloseHandle (hObject=0x1fc) returned 1 [0261.166] CloseHandle (hObject=0x204) returned 1 [0261.167] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMlg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmlg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0261.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVMlg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvmlg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0261.168] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce1c6ae, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ce1c6ae, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cf2774c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU2X1~1.0IL")) returned 0x7d2998 [0261.168] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6ce1c6ae, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6ce1c6ae, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cf2774c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU2X1~1.0IL")) returned 0 [0261.168] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0261.168] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0261.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU2X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu2x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0261.169] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf2774c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cf2774c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d1178e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTU3X1~1.0IL")) returned 1 [0261.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.170] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEMzNOdDMzUm4JRWR5WldW1lpTQW9SM0psWldO3EtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlemznoddmzum4jrwr5wldw1lptqw9sm0pswldo3etwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.171] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0261.171] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.171] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.237] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0261.237] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0261.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.261] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.272] CloseHandle (hObject=0x204) returned 1 [0261.272] CloseHandle (hObject=0x1fc) returned 1 [0261.272] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEMzNOdDMzUm4JRWR5WldW1lpTQW9SM0psWldO3EtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlemznoddmzum4jrwr5wldw1lptqw9sm0pswldo3etwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0261.273] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEMzNOdDMzUm4JRWR5WldW1lpTQW9SM0psWldO3EtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlemznoddmzum4jrwr5wldw1lptqw9sm0pswldo3etwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0261.274] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf2774c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cf2774c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d1178e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTU3X1~1.0IL")) returned 0x7d2c18 [0261.274] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6cf2774c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6cf2774c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d1178e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTU3X1~1.0IL")) returned 0 [0261.274] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0261.274] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0261.275] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU3X19D3256ZWN01W96c19DZW4sdW42cl9D33Nt33RlIEdyZWVjZSAoR3JlZWNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu3x19d3256zwn01w96c19dzw4sdw42cl9d33nt33rliedyzwvjzsaor3jlzwnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0261.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c757bdd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c757bdd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c872a75, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTU4X1~1.0IL")) returned 1 [0261.276] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.276] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFWl2WMGMyTm91U0JVWlc03DEyOXRJQzJIWl2KdFlXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfwl2wmgmytm91u0jvwlc03deyoxrjqzjiwl2kdflxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.277] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x370 [0261.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.277] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.348] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x370, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0261.348] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0261.349] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.372] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.383] CloseHandle (hObject=0x1fc) returned 1 [0261.383] CloseHandle (hObject=0x204) returned 1 [0261.383] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFWl2WMGMyTm91U0JVWlc03DEyOXRJQzJIWl2KdFlXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfwl2wmgmytm91u0jvwlc03deyoxrjqzjiwl2kdflxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0261.385] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlFWl2WMGMyTm91U0JVWlc03DEyOXRJQzJIWl2KdFlXNTVLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlfwl2wmgmytm91u0jvwlc03deyoxrjqzjiwl2kdflxntvlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0261.386] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c757bdd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c757bdd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c872a75, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTU4X1~1.0IL")) returned 0x7d2d58 [0261.386] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c757bdd, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c757bdd, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c872a75, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTU4X1~1.0IL")) returned 0 [0261.386] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0261.386] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0261.387] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9EZXV0c2NoZSBUZW4l129tIC2HZXJtYW55KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9ezxv0c2nozsbuzw4l129tic2hzxjtyw55kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0261.388] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1178e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d1178e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d2235c6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU4X1~2.0IL")) returned 1 [0261.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.388] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlSTF2S3DNHVmozMjBnS0V57VpXVmp1U24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlstf2s3dnhvmozmjbns0v57vpxvmp1u24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.389] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0261.389] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.389] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.491] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0261.491] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0261.492] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.516] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.527] CloseHandle (hObject=0x204) returned 1 [0261.527] CloseHandle (hObject=0x1fc) returned 1 [0261.527] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlSTF2S3DNHVmozMjBnS0V57VpXVmp1U24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlstf2s3dnhvmozmjbns0v57vpxvmp1u24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0261.528] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlSTF2S3DNHVmozMjBnS0V57VpXVmp1U24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlstf2s3dnhvmozmjbns0v57vpxvmp1u24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0261.528] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1178e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d1178e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d2235c6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU4X1~2.0IL")) returned 0x7d2c18 [0261.528] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d1178e2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d1178e2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d2235c6, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU4X1~2.0IL")) returned 0 [0261.528] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0261.529] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0261.530] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU4X19D3256ZWN01W96c19DZW4sdW42cl9RLXRl3GVj320gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu4x19d3256zwn01w96c19dzw4sdw42cl9rlxrl3gvj320gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0261.530] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2235c6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d2235c6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d365726, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU5X1~1.0IL")) returned 1 [0261.530] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.531] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03GMzUm45Q0FvVTFSRlZDNWdLRWR5WldW1lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03gmzum45q0fvvtfsrlzdnwdlrwr5wldw1lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.531] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0261.531] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.532] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.598] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0261.599] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0261.600] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.623] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.634] CloseHandle (hObject=0x1fc) returned 1 [0261.634] CloseHandle (hObject=0x204) returned 1 [0261.635] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03GMzUm45Q0FvVTFSRlZDNWdLRWR5WldW1lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03gmzum45q0fvvtfsrlzdnwdlrwr5wldw1lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0261.636] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03GMzUm45Q0FvVTFSRlZDNWdLRWR5WldW1lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03gmzum45q0fvvtfsrlzdnwdlrwr5wldw1lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0261.636] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2235c6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d2235c6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d365726, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU5X1~1.0IL")) returned 0x7d2a18 [0261.636] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d2235c6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d2235c6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d365726, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTU5X1~1.0IL")) returned 0 [0261.636] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0261.636] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0261.638] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTU5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtu5x19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0261.638] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c567da1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c567da1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c757bdd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTUWX1~1.0IL")) returned 1 [0261.638] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.638] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGTFZCc2RYTWdLRWRsY204MjN6NXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgtfzcc2rytwdlrwrsy204mjn6nxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.639] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0261.639] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.639] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.710] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0261.711] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0261.712] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.736] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0261.748] CloseHandle (hObject=0x204) returned 1 [0261.748] CloseHandle (hObject=0x1fc) returned 1 [0261.749] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGTFZCc2RYTWdLRWRsY204MjN6NXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgtfzcc2rytwdlrwrsy204mjn6nxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0261.750] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRVd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlGTFZCc2RYTWdLRWRsY204MjN6NXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrvd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlgtfzcc2rytwdlrwrsy204mjn6nxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0261.750] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c567da1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c567da1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c757bdd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTUWX1~1.0IL")) returned 0x7d2cd8 [0261.750] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c567da1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c567da1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c757bdd, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTUWX1~1.0IL")) returned 0 [0261.750] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0261.750] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0261.752] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUwX19D3256ZWN01W96c19DZW4sdW42cl9FLVBsdXMgKEdlcm123n5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuwx19d3256zwn01w96c19dzw4sdw42cl9flvbsdxmgkedlcm123n5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0261.752] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c872a75, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c872a75, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c9a4d0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTUYX1~1.0IL")) returned 1 [0261.752] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0261.752] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRV7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1UzU1WlNB31IyVn5zV0Y2N1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrv7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1uzu1wlnb31iyvn5zv0y2n1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0261.753] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0261.753] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0261.753] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0261.945] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0261.946] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0261.947] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0261.969] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.012] CloseHandle (hObject=0x1fc) returned 1 [0262.012] CloseHandle (hObject=0x204) returned 1 [0262.012] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRV7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1UzU1WlNB31IyVn5zV0Y2N1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrv7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1uzu1wlnb31iyvn5zv0y2n1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0262.013] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRV7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1UzU1WlNB31IyVn5zV0Y2N1NsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrv7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1uzu1wlnb31iyvn5zv0y2n1nszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0262.013] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c872a75, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c872a75, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c9a4d0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTUYX1~1.0IL")) returned 0x7d3018 [0262.013] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c872a75, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c872a75, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6c9a4d0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTUYX1~1.0IL")) returned 0 [0262.013] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0262.013] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0262.015] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0262.015] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a4d0f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c9a4d0f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cbb9e55, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTUZX1~1.0IL")) returned 1 [0262.015] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRV7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1UzU1WlNB31IyVn5zV0Y2N1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrv7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1uzu1wlnb31iyvn5zv0y2n1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.016] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0262.016] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.016] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.083] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0262.083] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0262.084] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.107] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.118] CloseHandle (hObject=0x204) returned 1 [0262.118] CloseHandle (hObject=0x1fc) returned 1 [0262.119] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRV7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1UzU1WlNB31IyVn5zV0Y2N1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrv7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1uzu1wlnb31iyvn5zv0y2n1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0262.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRV7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1UzU1WlNB31IyVn5zV0Y2N1NsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrv7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1uzu1wlnb31iyvn5zv0y2n1nszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0262.120] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a4d0f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c9a4d0f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cbb9e55, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTUZX1~1.0IL")) returned 0x7d2ad8 [0262.120] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c9a4d0f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6c9a4d0f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6cbb9e55, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTUZX1~1.0IL")) returned 0 [0262.120] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0262.120] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0262.121] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTUzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZS55ZSAoR2Vy3WF67Slf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtuzx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zs55zsaor2vy3wf67slf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0262.122] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d365726, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d365726, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d52f071, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTVFX0~1.0IL")) returned 1 [0262.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.122] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRWZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUyS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrwzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuys5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.123] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0262.123] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.123] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.188] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0262.188] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0262.190] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.215] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.225] CloseHandle (hObject=0x1fc) returned 1 [0262.225] CloseHandle (hObject=0x204) returned 1 [0262.226] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRWZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUyS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrwzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuys5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0262.226] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRWZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUyS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrwzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuys5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0262.227] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d365726, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d365726, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d52f071, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTVFX0~1.0IL")) returned 0x7d3098 [0262.227] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d365726, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d365726, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d52f071, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTVFX0~1.0IL")) returned 0 [0262.227] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0262.227] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0262.228] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTVfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX252JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtvfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx252jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0262.228] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6da1a06e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6da1a06e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6db24ec7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY0X1~1.0IL")) returned 1 [0262.229] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.229] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdRM5Z5WTc51VpTQW9S35oyM21O3EtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdrm5z5wtc51vptqw9s35oym21o3etwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.230] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0262.230] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.230] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.294] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0262.294] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0262.295] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.318] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.329] CloseHandle (hObject=0x204) returned 1 [0262.329] CloseHandle (hObject=0x1fc) returned 1 [0262.329] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdRM5Z5WTc51VpTQW9S35oyM21O3EtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdrm5z5wtc51vptqw9s35oym21o3etwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0262.330] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdRM5Z5WTc51VpTQW9S35oyM21O3EtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdrm5z5wtc51vptqw9s35oym21o3etwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0262.330] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6da1a06e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6da1a06e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6db24ec7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY0X1~1.0IL")) returned 0x7d3018 [0262.330] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6da1a06e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6da1a06e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6db24ec7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY0X1~1.0IL")) returned 0 [0262.330] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0262.330] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0262.332] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY0X19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgQ2FyY79iZSAoRnJ23mNlKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty0x19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugq2fyy79izsaornj23mnlkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0262.332] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db24ec7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6db24ec7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6dc7cbb4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY1X1~1.0IL")) returned 1 [0262.333] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.333] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SM1YyZEdWdFlXNDJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sm1yyzedwdflxndjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.333] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0262.333] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.334] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.438] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0262.438] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0262.439] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.477] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.487] CloseHandle (hObject=0x1fc) returned 1 [0262.488] CloseHandle (hObject=0x204) returned 1 [0262.488] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SM1YyZEdWdFlXNDJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sm1yyzedwdflxndjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0262.489] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SM1YyZEdWdFlXNDJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sm1yyzedwdflxndjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0262.489] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db24ec7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6db24ec7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6dc7cbb4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY1X1~1.0IL")) returned 0x7d3018 [0262.489] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6db24ec7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6db24ec7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6dc7cbb4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY1X1~1.0IL")) returned 0 [0262.489] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0262.489] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0262.491] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0262.491] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc7cbb4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6dc7cbb4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6de1ffba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY2X1~1.0IL")) returned 1 [0262.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.491] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SM1YyZEdWdFlXNDJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sm1yyzedwdflxndjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.492] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0262.492] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.492] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.562] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0262.562] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0262.563] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.587] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.598] CloseHandle (hObject=0x204) returned 1 [0262.598] CloseHandle (hObject=0x1fc) returned 1 [0262.598] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SM1YyZEdWdFlXNDJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sm1yyzedwdflxndjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0262.599] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9SM1YyZEdWdFlXNDJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9sm1yyzedwdflxndjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0262.599] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc7cbb4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6dc7cbb4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6de1ffba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY2X1~1.0IL")) returned 0x7d2a58 [0262.599] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc7cbb4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6dc7cbb4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6de1ffba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MTY2X1~1.0IL")) returned 0 [0262.599] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0262.599] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0262.601] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoR3V2dGVtYW42KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaor3v2dgvtyw42kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0262.601] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de460b2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6de460b2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6df510a1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY3X1~1.0IL")) returned 1 [0262.601] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.601] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMySGRXRjB1VzEyM0dFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumysgrxrjb1vzeym0dfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.602] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0262.602] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.602] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.679] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0262.679] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0262.680] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.702] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.713] CloseHandle (hObject=0x1fc) returned 1 [0262.713] CloseHandle (hObject=0x204) returned 1 [0262.713] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMySGRXRjB1VzEyM0dFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumysgrxrjb1vzeym0dfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0262.714] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMySGRXRjB1VzEyM0dFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumysgrxrjb1vzeym0dfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0262.714] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de460b2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6de460b2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6df510a1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY3X1~1.0IL")) returned 0x7d29d8 [0262.714] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6de460b2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6de460b2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6df510a1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY3X1~1.0IL")) returned 0 [0262.714] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0262.714] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0262.716] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY3X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty3x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0262.716] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df510a1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6df510a1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e0a85bb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY4X1~2.0IL")) returned 1 [0262.716] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.716] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM525V0YwWlc4MjNHRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm525v0ywwlc4mjnhrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.717] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0262.717] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.717] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.816] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0262.816] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0262.817] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.840] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0262.860] CloseHandle (hObject=0x204) returned 1 [0262.860] CloseHandle (hObject=0x1fc) returned 1 [0262.861] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM525V0YwWlc4MjNHRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm525v0ywwlc4mjnhrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0262.862] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM525V0YwWlc4MjNHRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm525v0ywwlc4mjnhrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0262.862] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df510a1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6df510a1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e0a85bb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY4X1~2.0IL")) returned 0x7d2a98 [0262.862] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6df510a1, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6df510a1, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e0a85bb, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY4X1~2.0IL")) returned 0 [0262.862] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0262.862] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0262.864] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0262.864] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6865d4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d6865d4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d79181b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTY4X1~1.0IL")) returned 1 [0262.864] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0262.864] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIY21W3F5yVWdLRWR5WldW1lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jiy21w3f5yvwdlrwr5wldw1lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0262.865] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0262.865] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0262.866] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0262.937] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0262.937] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0262.939] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0262.962] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.009] CloseHandle (hObject=0x1fc) returned 1 [0263.009] CloseHandle (hObject=0x204) returned 1 [0263.010] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIY21W3F5yVWdLRWR5WldW1lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jiy21w3f5yvwdlrwr5wldw1lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0263.011] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIY21W3F5yVWdLRWR5WldW1lpT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jiy21w3f5yvwdlrwr5wldw1lpt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0263.011] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6865d4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d6865d4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d79181b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTY4X1~1.0IL")) returned 0x7d2c98 [0263.011] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d6865d4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d6865d4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d79181b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTY4X1~1.0IL")) returned 0 [0263.011] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0263.011] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0263.016] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY4X19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty4x19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0263.016] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e0a85bb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e0a85bb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e1b363f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY5X1~1.0IL")) returned 1 [0263.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.016] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM525V0YwWlc4MjNHRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm525v0ywwlc4mjnhrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.017] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0263.017] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.017] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.082] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0263.082] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0263.083] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.105] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.117] CloseHandle (hObject=0x204) returned 1 [0263.117] CloseHandle (hObject=0x1fc) returned 1 [0263.118] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM525V0YwWlc4MjNHRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm525v0ywwlc4mjnhrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0263.119] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU1V5UElDM525V0YwWlc4MjNHRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrznvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu1v5ueldm525v0ywwlc4mjnhrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0263.119] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e0a85bb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e0a85bb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e1b363f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY5X1~1.0IL")) returned 0x7d3098 [0263.119] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e0a85bb, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e0a85bb, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e1b363f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTY5X1~1.0IL")) returned 0 [0263.119] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0263.119] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0263.120] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTY5X19D3256ZWN01W96c19DZW4sdW42cl9USUdPIC2HdWF0ZW123GEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mty5x19d3256zwn01w96c19dzw4sdw42cl9usudpic2hdwf0zw123gepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0263.120] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d52f071, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d52f071, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d63a0f2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYWX1~1.0IL")) returned 1 [0263.121] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.121] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03GMzUm45Q0FvVTFSRlZDNWdLRWR5WldW1lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03gmzum45q0fvvtfsrlzdnwdlrwr5wldw1lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.122] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0263.122] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.122] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.186] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0263.186] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0263.187] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.210] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.221] CloseHandle (hObject=0x1fc) returned 1 [0263.221] CloseHandle (hObject=0x204) returned 1 [0263.221] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03GMzUm45Q0FvVTFSRlZDNWdLRWR5WldW1lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03gmzum45q0fvvtfsrlzdnwdlrwr5wldw1lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0263.222] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03GMzUm45Q0FvVTFSRlZDNWdLRWR5WldW1lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrzd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03gmzum45q0fvvtfsrlzdnwdlrwr5wldw1lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0263.222] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d52f071, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d52f071, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d63a0f2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYWX1~1.0IL")) returned 0x7d3018 [0263.222] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d52f071, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d52f071, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d63a0f2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYWX1~1.0IL")) returned 0 [0263.222] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0263.222] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0263.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYwX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lc3RldCAoU1RFVC5gKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtywx19d3256zwn01w96c19dzw4sdw42cl9uzw4lc3rldcaou1rfvc5gkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0263.224] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d79181b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d79181b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d8c288b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYYX1~1.0IL")) returned 1 [0263.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.224] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIY21W3F5yVWdLRWR5WldW1lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrz7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jiy21w3f5yvwdlrwr5wldw1lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.227] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f0 [0263.227] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.227] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.321] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0263.321] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0263.322] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.345] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.357] CloseHandle (hObject=0x204) returned 1 [0263.357] CloseHandle (hObject=0x1fc) returned 1 [0263.357] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIY21W3F5yVWdLRWR5WldW1lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrz7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jiy21w3f5yvwdlrwr5wldw1lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0263.358] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JIY21W3F5yVWdLRWR5WldW1lpT3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrz7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jiy21w3f5yvwdlrwr5wldw1lpt3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0263.358] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d79181b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d79181b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d8c288b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYYX1~1.0IL")) returned 0x7d2998 [0263.358] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d79181b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d79181b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6d8c288b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYYX1~1.0IL")) returned 0 [0263.358] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0263.358] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0263.360] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYyX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBHcmVlY2UgKEdyZWVjZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyyx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbhcmvly2ugkedyzwvjzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0263.360] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8c288b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d8c288b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6da1a06e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYZX1~1.0IL")) returned 1 [0263.360] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.360] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZ7lg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrz7lg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.361] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0263.361] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.361] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.426] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0263.426] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0263.427] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.450] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.462] CloseHandle (hObject=0x1fc) returned 1 [0263.462] CloseHandle (hObject=0x204) returned 1 [0263.462] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZ7lg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrz7lg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0263.463] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVRZ7lg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvrz7lg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0263.463] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8c288b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d8c288b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6da1a06e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYZX1~1.0IL")) returned 0x7d2918 [0263.463] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d8c288b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6d8c288b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6da1a06e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MTYZX1~1.0IL")) returned 0 [0263.463] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0263.463] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0263.465] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTYzX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtyzx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0263.465] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e1b363f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e1b363f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e30ab87, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTZFX0~1.0IL")) returned 1 [0263.466] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.466] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVR1ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUzS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvr1zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuzs5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.466] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0263.467] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.467] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.536] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0263.536] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0263.537] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.561] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.572] CloseHandle (hObject=0x204) returned 1 [0263.572] CloseHandle (hObject=0x1fc) returned 1 [0263.572] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVR1ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUzS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvr1zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuzs5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0263.573] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVR1ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMDl3ZE2W75lDM5J5WE4wY21GczFXRXBYMjUzS5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvr1zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymdl3ze2w75ldm5j5we4wy21gczfxrxbymjuzs5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0263.573] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e1b363f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e1b363f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e30ab87, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTZFX0~1.0IL")) returned 0x7d2ad8 [0263.573] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e1b363f, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x6e1b363f, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x6e30ab87, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MTZFX0~1.0IL")) returned 0 [0263.574] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0263.574] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0263.575] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MTZfX0Nv3m5lY3Rp325zX0Nl3G413GFyX09wdHVzIC2BdXN0cmFs1WEpX253JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mtzfx0nv3m5ly3rp325zx0nl3g413gfyx09wdhvzic2bdxn0cmfs1wepx253jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0263.575] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712e676a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x712e676a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7143df0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MV9FQ2~1.0IL")) returned 1 [0263.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.576] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVY5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZW3T51WVd1djNtVWdRVzRpWVc1cFlTQW9RVzRpWVc1cFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvy5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzw3t51wvd1djntvwdrvzrpwvc1cfltqw9rvzrpwvc1cflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.576] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0263.576] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.577] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.677] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0263.677] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0263.678] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.701] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.713] CloseHandle (hObject=0x1fc) returned 1 [0263.713] CloseHandle (hObject=0x204) returned 1 [0263.714] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVY5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZW3T51WVd1djNtVWdRVzRpWVc1cFlTQW9RVzRpWVc1cFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvy5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzw3t51wvd1djntvwdrvzrpwvc1cfltqw9rvzrpwvc1cflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0263.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TVY5ZlEyOTYz3VZqZEdsdjN6TmZRMlZzM02Wc1lYSmZW3T51WVd1djNtVWdRVzRpWVc1cFlTQW9RVzRpWVc1cFlT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\tvy5zleyotyz3vzqzedsdjn6tmzrmlzzm02wc1lysmzw3t51wvd1djntvwdrvzrpwvc1cfltqw9rvzrpwvc1cflt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0263.715] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712e676a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x712e676a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7143df0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MV9FQ2~1.0IL")) returned 0x7d2a98 [0263.715] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x712e676a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x712e676a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7143df0f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MV9FQ2~1.0IL")) returned 0 [0263.715] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0263.715] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0263.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MV9fQ2963mVjdGlv3nNfQ2Vs3HVsYXJfVm95YWZv3mUgQW4iYW5pYSAoQW4iYW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mv9fq2963mvjdglv3nnfq2vs3hvsyxjfvm95ywzv3mugqw4iyw5pysaoqw4iyw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0263.717] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a04696, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85a04696, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85b3573c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZ2FX0~1.0IL")) returned 1 [0263.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXoyZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMHBNVEVNZ1RXOW54VzRsSUZS3DNHVlQ3WE4wWlc475lDM5N1VzQyY25W75tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txoyzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymhbnvevnz1rxow54vzrssuzs3dnhvlq3we4wwlc475ldm5n1vzqyy25w75twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0263.717] CloseHandle (hObject=0x204) returned 1 [0263.717] CloseHandle (hObject=0xffffffff) returned 1 [0263.717] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXoyZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMHBNVEVNZ1RXOW54VzRsSUZS3DNHVlQ3WE4wWlc475lDM5N1VzQyY25W75tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txoyzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymhbnvevnz1rxow54vzrssuzs3dnhvlq3we4wwlc475ldm5n1vzqyy25w75twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0263.718] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXoyZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMHBNVEVNZ1RXOW54VzRsSUZS3DNHVlQ3WE4wWlc475lDM5N1VzQyY25W75tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txoyzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymhbnvevnz1rxow54vzrssuzs3dnhvlq3we4wwlc475ldm5n1vzqyy25w75twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0263.718] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a04696, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85a04696, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85b3573c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZ2FX0~1.0IL")) returned 0x7d2cd8 [0263.718] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a04696, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85a04696, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85b3573c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZ2FX0~1.0IL")) returned 0 [0263.718] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0263.718] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0263.719] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz2fX0Nv3m5lY3Rp325zX0Nl3G413GFyX0pMTEMgTW9i1W4lIFRl3GVT7XN0ZW1zIC2CZW42cnVzKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz2fx0nv3m5ly3rp325zx0nl3g413gfyx0pmtemgtw9i1w4lifrl3gvt7xn0zw1zic2czw42cnvzkv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0263.719] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86092de2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86092de2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86177c40, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x480063, dwReserved1=0x76004a, cFileName="Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ50X1~1.0IL")) returned 1 [0263.720] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.720] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0FvVTI0dmRtRnI4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0fvvti0dmrtrni4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.721] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0263.721] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.721] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.786] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0263.787] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0263.788] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.812] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.823] CloseHandle (hObject=0x204) returned 1 [0263.823] CloseHandle (hObject=0x1fc) returned 1 [0263.823] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0FvVTI0dmRtRnI4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0fvvti0dmrtrni4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0263.824] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1MFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0FvVTI0dmRtRnI4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0fvvti0dmrtrni4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0263.824] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86092de2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86092de2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86177c40, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ50X1~1.0IL")) returned 0x7d3098 [0263.824] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86092de2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86092de2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86177c40, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ50X1~1.0IL")) returned 0 [0263.824] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0263.825] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0263.826] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz50X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz50x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0263.826] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86177c40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86177c40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86282a8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ51X1~1.0IL")) returned 1 [0263.826] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.827] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcGRHVnNJQzJUM0c5MlpXNXBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcgrhvnnjqzjum0c5mlpxnxbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.827] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0263.827] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.828] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0263.903] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0263.903] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0263.904] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0263.928] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0263.939] CloseHandle (hObject=0x1fc) returned 1 [0263.939] CloseHandle (hObject=0x204) returned 1 [0263.939] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcGRHVnNJQzJUM0c5MlpXNXBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcgrhvnnjqzjum0c5mlpxnxbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0263.940] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1MVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcGRHVnNJQzJUM0c5MlpXNXBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcgrhvnnjqzjum0c5mlpxnxbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0263.940] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86177c40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86177c40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86282a8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ51X1~1.0IL")) returned 0x7d3018 [0263.941] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86177c40, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86177c40, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86282a8a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ51X1~1.0IL")) returned 0 [0263.941] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0263.941] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0263.942] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz51X19D3256ZWN01W96c19DZW4sdW42cl9N32JpdGVsIC2T3G92ZW5pYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz51x19d3256zwn01w96c19dzw4sdw42cl9n32jpdgvsic2t3g92zw5pyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0263.942] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86282a8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86282a8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8657da0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ52X1~1.0IL")) returned 1 [0263.942] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0263.943] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVM1dDMySnAzQ0FvVTI0dmRtVjY4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvm1ddmysnazq0fvvti0dmrtvjy4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0263.944] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0263.944] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0263.944] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.055] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0264.055] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0264.056] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.078] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.090] CloseHandle (hObject=0x204) returned 1 [0264.090] CloseHandle (hObject=0x1fc) returned 1 [0264.090] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVM1dDMySnAzQ0FvVTI0dmRtVjY4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvm1ddmysnazq0fvvti0dmrtvjy4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0264.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1Mlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVM1dDMySnAzQ0FvVTI0dmRtVjY4V0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1mlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvm1ddmysnazq0fvvti0dmrtvjy4v0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0264.091] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86282a8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86282a8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8657da0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ52X1~1.0IL")) returned 0x7d3018 [0264.092] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86282a8a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86282a8a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8657da0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ52X1~1.0IL")) returned 0 [0264.092] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0264.092] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0264.093] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz52X19D3256ZWN01W96c19DZW4sdW42cl9T1S5t32Jp3CAoU24vdmV61WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz52x19d3256zwn01w96c19dzw4sdw42cl9t1s5t32jp3caou24vdmv61wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0264.093] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8657da0d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8657da0d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86806131, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ53X1~1.0IL")) returned 1 [0264.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.094] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1M1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1m1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.094] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0264.095] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.095] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.162] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0264.162] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0264.163] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.188] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.198] CloseHandle (hObject=0x1fc) returned 1 [0264.198] CloseHandle (hObject=0x204) returned 1 [0264.199] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1M1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1m1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0264.200] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1M1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1m1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0264.200] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8657da0d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8657da0d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86806131, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ53X1~1.0IL")) returned 0x7d2a58 [0264.200] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8657da0d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8657da0d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86806131, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ53X1~1.0IL")) returned 0 [0264.200] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0264.200] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0264.201] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz53X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz53x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0264.201] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86806131, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86806131, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86937613, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ54X1~2.0IL")) returned 1 [0264.202] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.202] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc0c04VTWdLR552ZF2S30lFRm1j3W4qWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc0c04vtwdlr552zf2s30lfrm1j3w4qwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.202] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0264.202] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.203] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.267] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0264.267] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0264.269] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.292] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.303] CloseHandle (hObject=0x204) returned 1 [0264.303] CloseHandle (hObject=0x1fc) returned 1 [0264.303] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc0c04VTWdLR552ZF2S30lFRm1j3W4qWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc0c04vtwdlr552zf2s30lfrm1j3w4qwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0264.304] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWlc0c04VTWdLR552ZF2S30lFRm1j3W4qWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewlc0c04vtwdlr552zf2s30lfrm1j3w4qwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0264.304] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86806131, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86806131, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86937613, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ54X1~2.0IL")) returned 0x7d3098 [0264.304] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86806131, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86806131, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86937613, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZ54X1~2.0IL")) returned 0 [0264.304] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0264.304] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0264.305] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9DZW4sLUMgKFNvdXRoIEFmcmljYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9dzw4slumgkfnvdxroiefmcmljyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0264.306] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cff59a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85cff59a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85de4368, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ54X1~1.0IL")) returned 1 [0264.306] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.306] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQTWlB31UyNHZ53UZyMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqtwlb31uynhz53uzymvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.307] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0264.307] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.307] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.403] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0264.403] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0264.405] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.429] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.440] CloseHandle (hObject=0x1fc) returned 1 [0264.441] CloseHandle (hObject=0x204) returned 1 [0264.441] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQTWlB31UyNHZ53UZyMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqtwlb31uynhz53uzymvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0264.442] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQTWlB31UyNHZ53UZyMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqtwlb31uynhz53uzymvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0264.442] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cff59a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85cff59a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85de4368, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ54X1~1.0IL")) returned 0x7d2a18 [0264.442] FindNextFileA (in: hFindFile=0x7d2a18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85cff59a, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85cff59a, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85de4368, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ54X1~1.0IL")) returned 0 [0264.442] FindClose (in: hFindFile=0x7d2a18 | out: hFindFile=0x7d2a18) returned 1 [0264.442] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0264.443] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz54X19D3256ZWN01W96c19DZW4sdW42cl9PMiAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz54x19d3256zwn01w96c19dzw4sdw42cl9pmiaou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0264.443] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8695d91c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8695d91c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86b4d761, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ55X1~1.0IL")) returned 1 [0264.444] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.444] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5U0Z1UyOTF5R2dnUVd17TFXTjJJQzJUMzNWMDFDQ5J135pwWTJFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5u0z1uyotf5r2dnuvd17tfxtjjjqzjumznwmdfdq5j135pwwtjfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.445] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0264.445] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.445] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.512] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0264.512] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0264.513] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.537] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.550] CloseHandle (hObject=0x204) returned 1 [0264.550] CloseHandle (hObject=0x1fc) returned 1 [0264.551] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5U0Z1UyOTF5R2dnUVd17TFXTjJJQzJUMzNWMDFDQ5J135pwWTJFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5u0z1uyotf5r2dnuvd17tfxtjjjqzjumznwmdfdq5j135pwwtjfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0264.551] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1NVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5U0Z1UyOTF5R2dnUVd17TFXTjJJQzJUMzNWMDFDQ5J135pwWTJFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1nvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5u0z1uyotf5r2dnuvd17tfxtjjjqzjumznwmdfdq5j135pwwtjfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0264.551] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8695d91c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8695d91c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86b4d761, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ55X1~1.0IL")) returned 0x7d3018 [0264.552] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8695d91c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8695d91c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86b4d761, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ55X1~1.0IL")) returned 0 [0264.552] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0264.552] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0264.553] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz55X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gU291dGggQWZy1WN2IC2T33V01CBBZnJpY2EpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz55x19d3256zwn01w96c19dzw4sdw42cl9nve4gu291dgggqwzy1wn2ic2t33v01cbbznjpy2epx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0264.553] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b3573c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85b3573c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85cff59a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ5WX1~1.0IL")) returned 1 [0264.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.554] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI17UpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi17updmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.554] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0264.555] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.555] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.622] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0264.622] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0264.623] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.648] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.660] CloseHandle (hObject=0x1fc) returned 1 [0264.660] CloseHandle (hObject=0x204) returned 1 [0264.660] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI17UpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi17updmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0264.661] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo1d1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI17UpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo1d1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi17updmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0264.661] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b3573c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85b3573c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85cff59a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ5WX1~1.0IL")) returned 0x7d2c98 [0264.661] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85b3573c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85b3573c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85cff59a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ5WX1~1.0IL")) returned 0 [0264.661] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0264.662] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0264.663] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5wX19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5wx19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0264.663] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0a309, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85e0a309, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85eef423, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZ5YX1~1.0IL")) returned 1 [0264.663] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.664] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo17Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLR55zMzN1MjEy3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo17vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlr55zmzn1mjey3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.664] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0264.664] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.665] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.760] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0264.760] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0264.761] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.784] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.795] CloseHandle (hObject=0x204) returned 1 [0264.795] CloseHandle (hObject=0x1fc) returned 1 [0264.795] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo17Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLR55zMzN1MjEy3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo17vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlr55zmzn1mjey3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0264.796] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo17Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY21GNloyVWdLR55zMzN1MjEy3DJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo17vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy21gnloyvwdlr55zmzn1mjey3djlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0264.796] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0a309, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85e0a309, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85eef423, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZ5YX1~1.0IL")) returned 0x7d3098 [0264.796] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85e0a309, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85e0a309, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x85eef423, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZ5YX1~1.0IL")) returned 0 [0264.796] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0264.796] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0264.797] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5yX19D3256ZWN01W96c19DZW4sdW42cl9PcmF6Z2UgKFNs33Z212l2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5yx19d3256zwn01w96c19dzw4sdw42cl9pcmf6z2ugkfns33z212l2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0264.798] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eef423, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85eef423, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8606cb78, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ5ZX1~1.0IL")) returned 1 [0264.798] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.798] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM0c5MllXc2dWR1ZzWld0djNTQW9VMjR2ZG1GcjFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum0c5mllxc2dwr1zzwld0djntqw9vmjr2zg1gcjfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.800] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0264.800] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.801] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0264.874] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0264.874] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0264.875] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0264.899] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0264.910] CloseHandle (hObject=0x1fc) returned 1 [0264.910] CloseHandle (hObject=0x204) returned 1 [0264.910] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM0c5MllXc2dWR1ZzWld0djNTQW9VMjR2ZG1GcjFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum0c5mllxc2dwr1zzwld0djntqw9vmjr2zg1gcjfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0264.911] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXo17lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM0c5MllXc2dWR1ZzWld0djNTQW9VMjR2ZG1GcjFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txo17lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum0c5mllxc2dwr1zzwld0djntqw9vmjr2zg1gcjfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0264.911] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eef423, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85eef423, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8606cb78, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ5ZX1~1.0IL")) returned 0x7d2b98 [0264.911] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eef423, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x85eef423, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8606cb78, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZ5ZX1~1.0IL")) returned 0 [0264.911] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0264.911] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0264.913] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mz5zX19D3256ZWN01W96c19DZW4sdW42cl9T3G92YWsgVGVsZWtv3SAoU24vdmFr1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mz5zx19d3256zwn01w96c19dzw4sdw42cl9t3g92ywsgvgvszwtv3saou24vdmfr1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0264.913] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb00686, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bb00686, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bc0b746, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZA0X1~1.0IL")) returned 1 [0264.913] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0264.913] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0264.914] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f0 [0264.914] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0264.915] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.042] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1f0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0265.042] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x200, lpOverlapped=0x0) returned 1 [0265.043] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.066] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.077] CloseHandle (hObject=0x204) returned 1 [0265.077] CloseHandle (hObject=0x1fc) returned 1 [0265.077] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0265.078] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0265.078] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb00686, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bb00686, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bc0b746, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZA0X1~1.0IL")) returned 0x7d3018 [0265.078] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bb00686, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bb00686, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bc0b746, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1f0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZA0X1~1.0IL")) returned 0 [0265.078] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0265.078] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0265.080] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0265.080] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc0b746, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bc0b746, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bd62d01, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA1X1~1.0IL")) returned 1 [0265.080] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.081] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.081] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x300 [0265.081] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.082] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.148] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x300, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x300, lpOverlapped=0x0) returned 1 [0265.148] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x310, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0265.149] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.171] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.182] CloseHandle (hObject=0x1fc) returned 1 [0265.182] CloseHandle (hObject=0x204) returned 1 [0265.182] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0265.183] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0265.183] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc0b746, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bc0b746, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bd62d01, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA1X1~1.0IL")) returned 0x7d3098 [0265.183] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bc0b746, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bc0b746, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bd62d01, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA1X1~1.0IL")) returned 0 [0265.183] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0265.183] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0265.185] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0265.185] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bd62d01, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bd62d01, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7be6dd4e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA2X1~1.0IL")) returned 1 [0265.185] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.185] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.186] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0265.186] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.186] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.251] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0265.251] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0265.253] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.275] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.286] CloseHandle (hObject=0x204) returned 1 [0265.286] CloseHandle (hObject=0x1fc) returned 1 [0265.287] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0265.287] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTVNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtvnr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0265.288] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bd62d01, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bd62d01, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7be6dd4e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA2X1~1.0IL")) returned 0x7d3018 [0265.288] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bd62d01, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bd62d01, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7be6dd4e, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA2X1~1.0IL")) returned 0 [0265.288] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0265.288] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0265.289] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA2X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza2x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0265.289] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be6dd4e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7be6dd4e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bf78e0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA3X1~1.0IL")) returned 1 [0265.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.290] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0265.291] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.291] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.417] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0265.417] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0265.418] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.442] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.452] CloseHandle (hObject=0x1fc) returned 1 [0265.452] CloseHandle (hObject=0x204) returned 1 [0265.453] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0265.453] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9U3W4qWV2KMlozVjJLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9u3w4qwv2kmlozvjjlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0265.453] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be6dd4e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7be6dd4e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bf78e0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA3X1~1.0IL")) returned 0x7d3018 [0265.454] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be6dd4e, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7be6dd4e, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bf78e0d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZA3X1~1.0IL")) returned 0 [0265.454] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0265.454] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0265.455] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA3X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoTmljYXJ2Z3V2KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza3x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaotmljyxj2z3v2kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0265.455] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6d41d9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b6d41d9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b851c24, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZA4X1~1.0IL")) returned 1 [0265.456] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.456] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yOXRJRTVsZHlCMVpXRnNZVzU1SUMyT1pYY2dX3VYyM0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yoxrjrtvszhlcmvpxrnnzvzu1sumyt1pyy2dx3vyym0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0265.456] CloseHandle (hObject=0x204) returned 1 [0265.456] CloseHandle (hObject=0xffffffff) returned 1 [0265.456] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yOXRJRTVsZHlCMVpXRnNZVzU1SUMyT1pYY2dX3VYyM0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yoxrjrtvszhlcmvpxrnnzvzu1sumyt1pyy2dx3vyym0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0265.456] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yOXRJRTVsZHlCMVpXRnNZVzU1SUMyT1pYY2dX3VYyM0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yoxrjrtvszhlcmvpxrnnzvzu1sumyt1pyy2dx3vyym0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0265.456] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6d41d9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b6d41d9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b851c24, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZA4X1~1.0IL")) returned 0x7d2c18 [0265.456] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b6d41d9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b6d41d9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b851c24, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZA4X1~1.0IL")) returned 0 [0265.457] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0265.457] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0265.458] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0265.458] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf78e0d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bf78e0d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c11c447, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x6e004c, dwReserved1=0x790042, cFileName="MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZA4X1~2.0IL")) returned 1 [0265.458] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.458] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyTzFXTjJj3UZ6ZFdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumytzfxtjjj3uz6zfdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.459] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x330 [0265.459] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.460] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.517] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x330, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0265.517] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x340, lpOverlapped=0x0) returned 1 [0265.518] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.544] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.556] CloseHandle (hObject=0x204) returned 1 [0265.556] CloseHandle (hObject=0x1fc) returned 1 [0265.556] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyTzFXTjJj3UZ6ZFdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumytzfxtjjj3uz6zfdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0265.557] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyTzFXTjJj3UZ6ZFdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumytzfxtjjj3uz6zfdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0265.557] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf78e0d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bf78e0d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c11c447, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZA4X1~2.0IL")) returned 0x7d2b18 [0265.557] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7bf78e0d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7bf78e0d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c11c447, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZA4X1~2.0IL")) returned 0 [0265.557] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0265.558] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0265.559] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2O1WN2cmFndWEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza4x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2o1wn2cmfndwepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0265.559] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c11c447, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c11c447, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c273aaa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZA5X1~1.0IL")) returned 1 [0265.559] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.560] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5U0Z0tFNXB1MlZ5MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5u0z0tfnxb1mlz5mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.560] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0265.560] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.561] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.628] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0265.629] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0265.630] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.655] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.666] CloseHandle (hObject=0x1fc) returned 1 [0265.666] CloseHandle (hObject=0x204) returned 1 [0265.666] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5U0Z0tFNXB1MlZ5MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5u0z0tfnxb1mlz5mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0265.667] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5U0Z0tFNXB1MlZ5MVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5u0z0tfnxb1mlz5mvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0265.667] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c11c447, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c11c447, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c273aaa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZA5X1~1.0IL")) returned 0x7d2c18 [0265.667] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c11c447, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c11c447, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c273aaa, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZA5X1~1.0IL")) returned 0 [0265.667] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0265.668] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0265.669] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzA5X19D3256ZWN01W96c19DZW4sdW42cl9NVE4gKE5pZ2Vy1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mza5x19d3256zwn01w96c19dzw4sdw42cl9nve4gke5pz2vy1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0265.669] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5c4163, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b5c4163, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b6d41d9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZAWX1~1.0IL")) returned 1 [0265.669] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.669] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D25W5dW3mNtVm4j7UFvVG1WM0lGcG4ZVzQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d25w5dw3mntvm4j7ufvvg1wm0lgcg4zvzqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.670] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0265.670] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.671] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.765] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0265.766] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0265.767] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.793] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.804] CloseHandle (hObject=0x204) returned 1 [0265.804] CloseHandle (hObject=0x1fc) returned 1 [0265.804] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D25W5dW3mNtVm4j7UFvVG1WM0lGcG4ZVzQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d25w5dw3mntvm4j7ufvvg1wm0lgcg4zvzqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0265.805] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpBd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3D25W5dW3mNtVm4j7UFvVG1WM0lGcG4ZVzQyM21RcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpbd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3d25w5dw3mntvm4j7ufvvg1wm0lgcg4zvzqym21rcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0265.805] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5c4163, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b5c4163, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b6d41d9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZAWX1~1.0IL")) returned 0x7d3018 [0265.805] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b5c4163, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b5c4163, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b6d41d9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZAWX1~1.0IL")) returned 0 [0265.806] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0265.806] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0265.807] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAwX19D3256ZWN01W96c19DZW4sdW42cl8yZGVncmVlcyAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzawx19d3256zwn01w96c19dzw4sdw42cl8yzgvncmvlcyaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0265.807] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b851c24, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b851c24, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b9f541d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZAYX1~1.0IL")) returned 1 [0265.807] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.808] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yOXRJRTVsZHlCMVpXRnNZVzU1SUMyT1pYY2dX3VYyM0dGNlpD3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yoxrjrtvszhlcmvpxrnnzvzu1sumyt1pyy2dx3vyym0dgnlpd3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0265.808] CloseHandle (hObject=0x1fc) returned 1 [0265.808] CloseHandle (hObject=0xffffffff) returned 1 [0265.808] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yOXRJRTVsZHlCMVpXRnNZVzU1SUMyT1pYY2dX3VYyM0dGNlpD3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yoxrjrtvszhlcmvpxrnnzvzu1sumyt1pyy2dx3vyym0dgnlpd3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0265.808] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpB7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yOXRJRTVsZHlCMVpXRnNZVzU1SUMyT1pYY2dX3VYyM0dGNlpD3GY4VEU1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpb7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yoxrjrtvszhlcmvpxrnnzvzu1sumyt1pyy2dx3vyym0dgnlpd3gy4veu1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0265.808] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b851c24, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b851c24, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b9f541d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZAYX1~1.0IL")) returned 0x7d2b98 [0265.808] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b851c24, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7b851c24, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7b9f541d, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZAYX1~1.0IL")) returned 0 [0265.808] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0265.808] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0265.810] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY29tIE5ldyB1ZWFsYW55IC2OZXcgWmV23GF6ZClf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzayx19d3256zwn01w96c19dzw4sdw42cl9uzw4ly29tie5ldyb1zwfsyw55ic2ozxcgwmv23gf6zclf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0265.810] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba1b851, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ba1b851, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bb00686, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x6e004c, dwReserved1=0x790042, cFileName="MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZAZX1~1.0IL")) returned 1 [0265.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.810] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JPV2lB31RtVjNJRnBsWVc0MjNtUXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jpv2lb31rtvjnjrnbswvc0mjntuxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.811] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x310 [0265.811] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.812] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0265.887] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x310, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x310, lpOverlapped=0x0) returned 1 [0265.887] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0265.888] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0265.911] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0265.922] CloseHandle (hObject=0x1fc) returned 1 [0265.923] CloseHandle (hObject=0x204) returned 1 [0265.923] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JPV2lB31RtVjNJRnBsWVc0MjNtUXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jpv2lb31rtvjnjrnbswvc0mjntuxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0265.925] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpB7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMzJSMlptOTZ1U0JPV2lB31RtVjNJRnBsWVc0MjNtUXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpb7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmzjsmlptotz1u0jpv2lb31rtvjnjrnbswvc0mjntuxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0265.925] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba1b851, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ba1b851, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bb00686, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZAZX1~1.0IL")) returned 0x7d2d58 [0265.925] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ba1b851, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ba1b851, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7bb00686, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZAZX1~1.0IL")) returned 0 [0265.925] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0265.925] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0265.927] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzAzX19D3256ZWN01W96c19DZW4sdW42cl9W32R2Zm96ZSBOWiAoTmV3IFplYW423mQpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzazx19d3256zwn01w96c19dzw4sdw42cl9w32r2zm96zsbowiaotmv3ifplyw423mqpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0265.927] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c273aaa, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c273aaa, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c417682, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZBFX0~1.0IL")) returned 1 [0265.927] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0265.927] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVF0VFc51TFXNG4JRUY4YzNS7TFXRWdLRUY4YzNS7TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvf0vfc51tfxng4jruy4yzns7tfxrwdlruy4yzns7tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0265.928] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0265.928] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0265.929] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.035] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0266.035] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0266.036] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.060] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.071] CloseHandle (hObject=0x204) returned 1 [0266.071] CloseHandle (hObject=0x1fc) returned 1 [0266.071] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVF0VFc51TFXNG4JRUY4YzNS7TFXRWdLRUY4YzNS7TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvf0vfc51tfxng4jruy4yzns7tfxrwdlruy4yzns7tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0266.072] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpCZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVF0VFc51TFXNG4JRUY4YzNS7TFXRWdLRUY4YzNS7TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpczlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvf0vfc51tfxng4jruy4yzns7tfxrwdlruy4yzns7tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0266.072] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c273aaa, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c273aaa, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c417682, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZBFX0~1.0IL")) returned 0x7d2c58 [0266.072] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c273aaa, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c273aaa, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c417682, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZBFX0~1.0IL")) returned 0 [0266.072] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0266.072] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0266.074] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzBfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIEF1c3Ry1WEgKEF1c3Ry1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzbfx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lief1c3ry1wegkef1c3ry1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0266.074] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834a1c45, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x834a1c45, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x836d8c2b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC0X1~1.0IL")) returned 1 [0266.074] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.074] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.075] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e0 [0266.075] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.075] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.141] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0266.141] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1f0, lpOverlapped=0x0) returned 1 [0266.143] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.168] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.179] CloseHandle (hObject=0x1fc) returned 1 [0266.179] CloseHandle (hObject=0x204) returned 1 [0266.179] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0266.180] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMFg4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmfg4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0266.180] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834a1c45, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x834a1c45, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x836d8c2b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC0X1~1.0IL")) returned 0x7d2c18 [0266.180] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834a1c45, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x834a1c45, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x836d8c2b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC0X1~1.0IL")) returned 0 [0266.180] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0266.180] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0266.182] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc0X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc0x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0266.182] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836d8c2b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x836d8c2b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83987350, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC1X1~1.0IL")) returned 1 [0266.182] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.183] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5VNZ1UyRjF1RzVnUV2KMllt3DJJQzJUWV2WNTFTQ5Jj3UZpMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5vnz1uyrjf1rzvnuv2kmllt3djjqzjuwv2wntftq5jj3uzpmvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.183] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0266.183] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.184] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.249] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0266.250] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0266.251] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.275] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.286] CloseHandle (hObject=0x204) returned 1 [0266.286] CloseHandle (hObject=0x1fc) returned 1 [0266.286] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5VNZ1UyRjF1RzVnUV2KMllt3DJJQzJUWV2WNTFTQ5Jj3UZpMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5vnz1uyrjf1rzvnuv2kmllt3djjqzjuwv2wntftq5jj3uzpmvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0266.287] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOV5VNZ1UyRjF1RzVnUV2KMllt3DJJQzJUWV2WNTFTQ5Jj3UZpMVdFcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlov5vnz1uyrjf1rzvnuv2kmllt3djjqzjuwv2wntftq5jj3uzpmvdfcfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0266.287] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836d8c2b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x836d8c2b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83987350, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC1X1~1.0IL")) returned 0x7d2998 [0266.287] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x836d8c2b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x836d8c2b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83987350, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC1X1~1.0IL")) returned 0 [0266.288] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0266.288] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0266.289] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc1X19D3256ZWN01W96c19DZW4sdW42cl9NVEMgU2F1ZG5gQXJ2Yml2IC2TYXV51SBBcmFi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc1x19d3256zwn01w96c19dzw4sdw42cl9nvemgu2f1zg5gqxj2yml2ic2tyxv51sbbcmfi1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0266.289] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83987350, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83987350, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83b512d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC2X1~1.0IL")) returned 1 [0266.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.290] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUV5VNZ0tGTjJ5V1JwSUVG7VlXSnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluv5vnz0tgtjj5v1jwsuvg7vlxsnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.290] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0266.290] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.291] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.389] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0266.389] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0266.390] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.414] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.425] CloseHandle (hObject=0x1fc) returned 1 [0266.425] CloseHandle (hObject=0x204) returned 1 [0266.425] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUV5VNZ0tGTjJ5V1JwSUVG7VlXSnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluv5vnz0tgtjj5v1jwsuvg7vlxsnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0266.426] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUV5VNZ0tGTjJ5V1JwSUVG7VlXSnBZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluv5vnz0tgtjj5v1jwsuvg7vlxsnbzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0266.426] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83987350, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83987350, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83b512d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC2X1~1.0IL")) returned 0x7d2c18 [0266.426] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83987350, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83987350, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83b512d1, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC2X1~1.0IL")) returned 0 [0266.427] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0266.427] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0266.431] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc2X19D3256ZWN01W96c19DZW4sdW42cl9TVEMgKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc2x19d3256zwn01w96c19dzw4sdw42cl9tvemgkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0266.431] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b77250, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83b77250, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83d41186, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC3X1~1.0IL")) returned 1 [0266.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.432] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHNTJJSFJsM0dW3TMyNXA43UVnVTNK1TFXcG4JR5pUSUMyVFpYSm54V0VnS0ZK3GNIVm5zR24qSUc53UtT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhntjjsfjsm0dw3tmynxa43uvnvtnk1tfxcg4jr5pusumyvfpysm54v0vns0zk3gnivm5zr24qsuc53utt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0266.432] CloseHandle (hObject=0x204) returned 1 [0266.432] CloseHandle (hObject=0xffffffff) returned 1 [0266.432] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHNTJJSFJsM0dW3TMyNXA43UVnVTNK1TFXcG4JR5pUSUMyVFpYSm54V0VnS0ZK3GNIVm5zR24qSUc53UtT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhntjjsfjsm0dw3tmynxa43uvnvtnk1tfxcg4jr5pusumyvfpysm54v0vns0zk3gnivm5zr24qsuc53utt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0266.432] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHNTJJSFJsM0dW3TMyNXA43UVnVTNK1TFXcG4JR5pUSUMyVFpYSm54V0VnS0ZK3GNIVm5zR24qSUc53UtT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhntjjsfjsm0dw3tmynxa43uvnvtnk1tfxcg4jr5pusumyvfpysm54v0vns0zk3gnivm5zr24qsuc53utt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0266.432] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b77250, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83b77250, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83d41186, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC3X1~1.0IL")) returned 0x7d2b58 [0266.433] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83b77250, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83b77250, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x83d41186, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZC3X1~1.0IL")) returned 0 [0266.433] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0266.433] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0266.434] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc3X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3G52IHRl3GVm325p1mEgU3Ji1WplIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc3x19d3256zwn01w96c19dzw4sdw42cl9n32jp3g52ihrl3gvm325p1megu3ji1wplifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0266.434] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dd9ad6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83dd9ad6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x840ae788, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x7ca4d8, dwReserved1=0x0, cFileName="Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC4X1~2.0IL")) returned 1 [0266.434] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.435] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJUWl2K1TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjuwl2k1tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.435] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x390 [0266.435] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.436] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.675] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x390, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0266.675] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x3a0, lpOverlapped=0x0) returned 1 [0266.676] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.700] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.711] CloseHandle (hObject=0x204) returned 1 [0266.711] CloseHandle (hObject=0x1fc) returned 1 [0266.712] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJUWl2K1TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjuwl2k1tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0266.712] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJUWl2K1TFXRXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjuwl2k1tfxrxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0266.713] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dd9ad6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83dd9ad6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x840ae788, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC4X1~2.0IL")) returned 0x7d2c18 [0266.713] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83dd9ad6, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x83dd9ad6, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x840ae788, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x390, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC4X1~2.0IL")) returned 0 [0266.713] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0266.713] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0266.714] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0266.714] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf8011, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82bf8011, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x82e3438f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZC4X1~1.0IL")) returned 1 [0266.715] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.715] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3Dl1Wlc1cGMyVjV5R1ZzWldOdjNTQW9V3lZ6YzJsMjNpQ5d1V1JsY21GMDFXOTZLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dl1wlc1cgmyvjv5r1zzwldodjntqw9v3lz6yzjsmjnpq5d1v1jsy21gmdfxotzlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0266.715] CloseHandle (hObject=0x1fc) returned 1 [0266.715] CloseHandle (hObject=0xffffffff) returned 1 [0266.715] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3Dl1Wlc1cGMyVjV5R1ZzWldOdjNTQW9V3lZ6YzJsMjNpQ5d1V1JsY21GMDFXOTZLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dl1wlc1cgmyvjv5r1zzwldodjntqw9v3lz6yzjsmjnpq5d1v1jsy21gmdfxotzlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0266.715] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3Dl1Wlc1cGMyVjV5R1ZzWldOdjNTQW9V3lZ6YzJsMjNpQ5d1V1JsY21GMDFXOTZLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dl1wlc1cgmyvjv5r1zzwldodjntqw9v3lz6yzjsmjnpq5d1v1jsy21gmdfxotzlvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0xffffffff [0266.715] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf8011, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82bf8011, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x82e3438f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZC4X1~1.0IL")) returned 0x7d2b18 [0266.715] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82bf8011, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82bf8011, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x82e3438f, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZC4X1~1.0IL")) returned 0 [0266.716] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0266.716] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0266.717] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc4X19D3256ZWN01W96c19DZW4sdW42cl9ZZW5pc2V5dGVsZWNv3SAoUnVzc2l23iBGZWRlcmF01W96KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc4x19d3256zwn01w96c19dzw4sdw42cl9zzw5pc2v5dgvszwnv3saounvzc2l23ibgzwrlcmf01w96kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0266.717] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x840ae788, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x840ae788, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84310bf4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x560051, dwReserved1=0x360041, cFileName="Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC5X1~1.0IL")) returned 1 [0266.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.717] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJUWl2K1TFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjuwl2k1tfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.718] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x380 [0266.718] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.718] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.815] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x380, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0266.815] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x390, lpOverlapped=0x0) returned 1 [0266.816] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.839] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.859] CloseHandle (hObject=0x1fc) returned 1 [0266.859] CloseHandle (hObject=0x204) returned 1 [0266.860] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJUWl2K1TFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjuwl2k1tfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0266.860] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJUWl2K1TFXRXBYMjU0S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjuwl2k1tfxrxbymju0s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0266.861] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x840ae788, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x840ae788, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84310bf4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC5X1~1.0IL")) returned 0x7d2b58 [0266.861] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x840ae788, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x840ae788, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84310bf4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZC5X1~1.0IL")) returned 0 [0266.861] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0266.861] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0266.862] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzc5X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2TZXJi1WEpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzc5x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2tzxji1wepx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0266.862] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82923499, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82923499, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x82bd1e63, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZCWX1~1.0IL")) returned 1 [0266.863] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.863] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWY21Gc2RHVnNJQzJTZF2O7jFXRjZJRVpsW5dW7VlYUnAzMjRwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwy21gc2rhvnnjqzjtzf2o7jfxrjzjrvpsw5dw7vlyunazmjrwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.864] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x320 [0266.864] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.864] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0266.938] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x320, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x320, lpOverlapped=0x0) returned 1 [0266.938] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x330, lpOverlapped=0x0) returned 1 [0266.939] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0266.962] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0266.972] CloseHandle (hObject=0x204) returned 1 [0266.973] CloseHandle (hObject=0x1fc) returned 1 [0266.973] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWY21Gc2RHVnNJQzJTZF2O7jFXRjZJRVpsW5dW7VlYUnAzMjRwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwy21gc2rhvnnjqzjtzf2o7jfxrjzjrvpsw5dw7vlyunazmjrwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0266.974] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpjd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWY21Gc2RHVnNJQzJTZF2O7jFXRjZJRVpsW5dW7VlYUnAzMjRwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwy21gc2rhvnnjqzjtzf2o7jfxrjzjrvpsw5dw7vlyunazmjrwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0266.974] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82923499, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82923499, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x82bd1e63, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZCWX1~1.0IL")) returned 0x7d3018 [0266.974] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82923499, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82923499, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x82bd1e63, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x320, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZCWX1~1.0IL")) returned 0 [0266.974] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0266.974] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0266.976] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcwX19D3256ZWN01W96c19DZW4sdW42cl9VcmFsdGVsIC2SdXNz1WF6IEZlZGVyYXRp324pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcwx19d3256zwn01w96c19dzw4sdw42cl9vcmfsdgvsic2sdxnz1wf6iezlzgvyyxrp324px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0266.976] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ea6aad, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82ea6aad, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x831c7ca3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZCYX1~1.0IL")) returned 1 [0266.976] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0266.976] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNINWdLR54yZFdScElFRnlZV0pwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdninwdlr54yzfdscelfrnlzv0pwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0266.977] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0266.977] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0266.977] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.075] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0267.075] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0267.076] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.098] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.113] CloseHandle (hObject=0x1fc) returned 1 [0267.113] CloseHandle (hObject=0x204) returned 1 [0267.113] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNINWdLR54yZFdScElFRnlZV0pwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdninwdlr54yzfdscelfrnlzv0pwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0267.114] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpj7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNINWdLR54yZFdScElFRnlZV0pwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdninwdlr54yzfdscelfrnlzv0pwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0267.114] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ea6aad, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82ea6aad, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x831c7ca3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZCYX1~1.0IL")) returned 0x7d2b18 [0267.114] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82ea6aad, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x82ea6aad, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x831c7ca3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZCYX1~1.0IL")) returned 0 [0267.114] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0267.114] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0267.116] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzcyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzcyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0267.116] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831c7ca3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x831c7ca3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x834a1c45, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZCZX1~1.0IL")) returned 1 [0267.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.116] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNINWdLR54yZFdScElFRnlZV0pwWVNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdninwdlr54yzfdscelfrnlzv0pwwvnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.117] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0267.117] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.117] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.185] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0267.185] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0267.186] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.210] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.221] CloseHandle (hObject=0x204) returned 1 [0267.221] CloseHandle (hObject=0x1fc) returned 1 [0267.222] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNINWdLR54yZFdScElFRnlZV0pwWVNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdninwdlr54yzfdscelfrnlzv0pwwvnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0267.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpj7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNINWdLR54yZFdScElFRnlZV0pwWVNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdninwdlr54yzfdscelfrnlzv0pwwvnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0267.223] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831c7ca3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x831c7ca3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x834a1c45, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZCZX1~1.0IL")) returned 0x7d2b98 [0267.223] FindNextFileA (in: hFindFile=0x7d2b98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831c7ca3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x831c7ca3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x834a1c45, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZCZX1~1.0IL")) returned 0 [0267.223] FindClose (in: hFindFile=0x7d2b98 | out: hFindFile=0x7d2b98) returned 1 [0267.223] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0267.224] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzczX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3H5gKFN2dWRpIEFyYWJpYSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzczx19d3256zwn01w96c19dzw4sdw42cl9n32jp3h5gkfn2dwrpiefyywjpyslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0267.224] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84310bf4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84310bf4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x844da705, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZDFX0~1.0IL")) returned 1 [0267.225] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.225] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXp5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEpsVTFRZ0tFSmwzR0Z5ZF2NcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txp5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymepsvtfrz0tfsmwzr0z5zf2ncfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.226] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0267.226] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.226] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.323] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0267.323] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0267.324] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.347] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.358] CloseHandle (hObject=0x1fc) returned 1 [0267.358] CloseHandle (hObject=0x204) returned 1 [0267.359] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXp5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEpsVTFRZ0tFSmwzR0Z5ZF2NcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txp5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymepsvtfrz0tfsmwzr0z5zf2ncfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0 [0267.359] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXp5ZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEpsVTFRZ0tFSmwzR0Z5ZF2NcFgyNXdKQzJmWDA4V1NVUXBRRmRCVUM1d2NtOTI3RzFzLjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txp5zlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymepsvtfrz0tfsmwzr0z5zf2ncfgynxdkqzjmwda4v1nvuxbrrmrcvum1d2ntoti3rzfzljbp3gz6cg99.0ilfzr")) returned 0x20 [0267.360] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84310bf4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84310bf4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x844da705, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZDFX0~1.0IL")) returned 0x7d3018 [0267.360] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84310bf4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84310bf4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x844da705, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZDFX0~1.0IL")) returned 0 [0267.360] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0267.360] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0267.361] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzdfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0JlU1QgKEJl3GFydXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzdfx0nv3m5ly3rp325zx0nl3g413gfyx0jlu1qgkejl3gfydxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0267.361] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c869a8c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c869a8c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c99ad13, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE0X1~1.0IL")) returned 1 [0267.362] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.362] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNH3DY47UJIVTAwZ0tGQjI4Mm46ZEdGN5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnh3dy47ujivtawz0tgqji4mm46zedgn5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.362] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0267.362] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.363] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.427] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0267.427] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0267.428] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.452] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.463] CloseHandle (hObject=0x204) returned 1 [0267.463] CloseHandle (hObject=0x1fc) returned 1 [0267.464] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNH3DY47UJIVTAwZ0tGQjI4Mm46ZEdGN5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnh3dy47ujivtawz0tgqji4mm46zedgn5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0267.464] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNH3DY47UJIVTAwZ0tGQjI4Mm46ZEdGN5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnh3dy47ujivtawz0tgqji4mm46zedgn5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0267.465] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c869a8c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c869a8c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c99ad13, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE0X1~1.0IL")) returned 0x7d2d58 [0267.465] FindNextFileA (in: hFindFile=0x7d2d58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c869a8c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c869a8c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c99ad13, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE0X1~1.0IL")) returned 0 [0267.465] FindClose (in: hFindFile=0x7d2d58 | out: hFindFile=0x7d2d58) returned 1 [0267.465] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0267.466] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE0X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze0x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0267.466] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c99ad13, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c99ad13, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7caf2286, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE1X1~1.0IL")) returned 1 [0267.467] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.467] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNH3DY47UJIVTAwZ0tGQjI4Mm46ZEdGN5tWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnh3dy47ujivtawz0tgqji4mm46zedgn5twoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.468] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0267.468] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.468] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.531] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0267.531] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0267.532] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.558] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.569] CloseHandle (hObject=0x1fc) returned 1 [0267.569] CloseHandle (hObject=0x204) returned 1 [0267.569] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNH3DY47UJIVTAwZ0tGQjI4Mm46ZEdGN5tWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnh3dy47ujivtawz0tgqji4mm46zedgn5twoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0267.570] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNH3DY47UJIVTAwZ0tGQjI4Mm46ZEdGN5tWOXBNU1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnh3dy47ujivtawz0tgqji4mm46zedgn5twoxbnu1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0267.570] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c99ad13, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c99ad13, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7caf2286, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE1X1~1.0IL")) returned 0x7d2a58 [0267.570] FindNextFileA (in: hFindFile=0x7d2a58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c99ad13, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c99ad13, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7caf2286, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE1X1~1.0IL")) returned 0 [0267.570] FindClose (in: hFindFile=0x7d2a58 | out: hFindFile=0x7d2a58) returned 1 [0267.570] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0267.572] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE1X19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3Gl61yBHU00gKFB212lzdGF6KV9pMSQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze1x19d3256zwn01w96c19dzw4sdw42cl9n32jp3gl61ybhu00gkfb212lzdgf6kv9pmsqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0267.572] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7caf2286, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7caf2286, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cbfd283, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZE2X1~1.0IL")) returned 1 [0267.572] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.572] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJRWVd0cGMzUjIz1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjrwvd0cgmzujiz1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.573] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x350 [0267.573] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.573] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.634] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x350, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x350, lpOverlapped=0x0) returned 1 [0267.635] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0267.636] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.659] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.669] CloseHandle (hObject=0x204) returned 1 [0267.670] CloseHandle (hObject=0x1fc) returned 1 [0267.670] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJRWVd0cGMzUjIz1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjrwvd0cgmzujiz1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0267.671] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJRWVd0cGMzUjIz1W4mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjrwvd0cgmzujiz1w4mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0267.671] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7caf2286, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7caf2286, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cbfd283, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZE2X1~1.0IL")) returned 0x7d29d8 [0267.671] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7caf2286, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7caf2286, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cbfd283, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x350, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZE2X1~1.0IL")) returned 0 [0267.671] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0267.671] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0267.672] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze2x19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0267.673] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbfd283, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cbfd283, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cdc6c37, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZE3X1~1.0IL")) returned 1 [0267.673] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.673] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWWm05NlpTQW9VR0ZyMV2OMFlXNHBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwwm05nlptqw9vr0zymv2omflxnhbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.674] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0267.674] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.674] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.779] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0267.779] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0267.780] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.803] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.814] CloseHandle (hObject=0x1fc) returned 1 [0267.814] CloseHandle (hObject=0x204) returned 1 [0267.814] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWWm05NlpTQW9VR0ZyMV2OMFlXNHBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwwm05nlptqw9vr0zymv2omflxnhbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0267.815] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlWWm05NlpTQW9VR0ZyMV2OMFlXNHBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlwwm05nlptqw9vr0zymv2omflxnhbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0267.815] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbfd283, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cbfd283, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cdc6c37, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZE3X1~1.0IL")) returned 0x7d3018 [0267.815] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbfd283, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cbfd283, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cdc6c37, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZE3X1~1.0IL")) returned 0 [0267.815] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0267.815] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0267.817] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE3X19D3256ZWN01W96c19DZW4sdW42cl9VZm96ZSAoUGFr1XN0YW4pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze3x19d3256zwn01w96c19dzw4sdw42cl9vzm96zsaougfr1xn0yw4px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0267.817] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5226ec, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c5226ec, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c62d533, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZE4X1~1.0IL")) returned 1 [0267.817] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.817] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU5VNZ1RtOXl5M5Y1SUMyTzMzSjNZWDVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu5vnz1rtoxl5m5y1sumytzmzsjnzwdvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.818] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0267.818] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.819] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0267.895] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0267.895] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0267.896] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0267.924] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0267.935] CloseHandle (hObject=0x204) returned 1 [0267.935] CloseHandle (hObject=0x1fc) returned 1 [0267.935] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU5VNZ1RtOXl5M5Y1SUMyTzMzSjNZWDVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu5vnz1rtoxl5m5y1sumytzmzsjnzwdvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0267.936] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVU5VNZ1RtOXl5M5Y1SUMyTzMzSjNZWDVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvu5vnz1rtoxl5m5y1sumytzmzsjnzwdvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0267.936] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5226ec, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c5226ec, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c62d533, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZE4X1~1.0IL")) returned 0x7d3018 [0267.936] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c5226ec, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c5226ec, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c62d533, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZE4X1~1.0IL")) returned 0 [0267.937] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0267.937] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0267.938] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9UREMgTm9yd2F5IC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9uremgtm9yd2f5ic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0267.939] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cdc6c37, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cdc6c37, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ceabd12, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZE4X1~2.0IL")) returned 1 [0267.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0267.939] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYWV2KcFpDQlV1VzRsWTI5dElDMlFZV3RwYzNSMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlywv2kcfpdqlv1vzrswti5deldmlfzv3rwyznsmjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0267.940] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0267.940] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0267.940] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.052] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0268.053] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0268.054] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.076] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.087] CloseHandle (hObject=0x1fc) returned 1 [0268.087] CloseHandle (hObject=0x204) returned 1 [0268.087] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYWV2KcFpDQlV1VzRsWTI5dElDMlFZV3RwYzNSMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlywv2kcfpdqlv1vzrswti5deldmlfzv3rwyznsmjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0268.088] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlYWV2KcFpDQlV1VzRsWTI5dElDMlFZV3RwYzNSMjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlywv2kcfpdqlv1vzrswti5deldmlfzv3rwyznsmjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0268.088] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cdc6c37, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cdc6c37, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ceabd12, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZE4X1~2.0IL")) returned 0x7d2c18 [0268.088] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cdc6c37, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cdc6c37, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ceabd12, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZE4X1~2.0IL")) returned 0 [0268.088] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0268.088] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0268.090] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE4X19D3256ZWN01W96c19DZW4sdW42cl9XYXJpZCBUZW4lY29tIC2QYWtpc3R23ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze4x19d3256zwn01w96c19dzw4sdw42cl9xyxjpzcbuzw4ly29tic2qywtpc3r23ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0268.090] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ced1f66, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ced1f66, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cfb6d74, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE5X1~1.0IL")) returned 1 [0268.090] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.090] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dwMmQzZDIzQ0FvVUdGc1pYTjA4VzVwWVc0Z1FYVjA4Rzl5MV2SNUtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dwmmqzzdizq0fvvudgc1pytja4vzvwwvc0z1fyvja4rzl5mv2snutwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0268.090] CloseHandle (hObject=0x204) returned 1 [0268.090] CloseHandle (hObject=0xffffffff) returned 1 [0268.090] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dwMmQzZDIzQ0FvVUdGc1pYTjA4VzVwWVc0Z1FYVjA4Rzl5MV2SNUtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dwmmqzzdizq0fvvudgc1pytja4vzvwwvc0z1fyvja4rzl5mv2snutwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0268.091] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlCM0dwMmQzZDIzQ0FvVUdGc1pYTjA4VzVwWVc0Z1FYVjA4Rzl5MV2SNUtWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlcm0dwmmqzzdizq0fvvudgc1pytja4vzvwwvc0z1fyvja4rzl5mv2snutwoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0268.091] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ced1f66, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ced1f66, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cfb6d74, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE5X1~1.0IL")) returned 0x7d2ad8 [0268.091] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ced1f66, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ced1f66, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7cfb6d74, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZE5X1~1.0IL")) returned 0 [0268.091] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0268.091] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0268.092] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzE5X19D3256ZWN01W96c19DZW4sdW42cl9B3Gp2d3d23CAoUGFsZXN01W5pYW4gQXV01G9y1XR5KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mze5x19d3256zwn01w96c19dzw4sdw42cl9b3gp2d3d23caougfszxn01w5pyw4gqxv01g9y1xr5kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0268.093] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c43d954, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c43d954, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c5226ec, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x480063, dwReserved1=0x76004a, cFileName="MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZEWX1~1.0IL")) returned 1 [0268.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.093] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlPWl2SRDMyMGdLRTV2Y255MjdT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlpwl2srdmymgdlrtv2y255mjdt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.097] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0268.097] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.097] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.166] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0268.166] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0268.167] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.190] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.201] CloseHandle (hObject=0x204) returned 1 [0268.202] CloseHandle (hObject=0x1fc) returned 1 [0268.202] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlPWl2SRDMyMGdLRTV2Y255MjdT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlpwl2srdmymgdlrtv2y255mjdt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0268.203] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpFd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlPWl2SRDMyMGdLRTV2Y255MjdT3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpfd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlpwl2srdmymgdlrtv2y255mjdt3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0268.203] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c43d954, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c43d954, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c5226ec, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZEWX1~1.0IL")) returned 0x7d2c98 [0268.203] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c43d954, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c43d954, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c5226ec, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZEWX1~1.0IL")) returned 0 [0268.203] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0268.203] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0268.204] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEwX19D3256ZWN01W96c19DZW4sdW42cl9OZXRD320gKE5vcnd27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzewx19d3256zwn01w96c19dzw4sdw42cl9ozxrd320gke5vcnd27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0268.205] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c62d533, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c62d533, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c75e9f8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZEYX1~1.0IL")) returned 1 [0268.205] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.205] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJPMzNKM1lYNXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjpmznkm1lynxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.206] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0268.206] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.206] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.270] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0268.270] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0268.271] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.294] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.305] CloseHandle (hObject=0x1fc) returned 1 [0268.305] CloseHandle (hObject=0x204) returned 1 [0268.305] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJPMzNKM1lYNXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjpmznkm1lynxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0268.306] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpF7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03DNtOXlJQzJPMzNKM1lYNXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpf7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03dntoxljqzjpmznkm1lynxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0268.306] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c62d533, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c62d533, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c75e9f8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZEYX1~1.0IL")) returned 0x7d3018 [0268.306] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c62d533, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c62d533, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c75e9f8, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZEYX1~1.0IL")) returned 0 [0268.306] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0268.306] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0268.308] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4l3m9yIC2O33J3YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzeyx19d3256zwn01w96c19dzw4sdw42cl9uzw4l3m9yic2o33j3yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0268.308] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c75e9f8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c75e9f8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c846164, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZEZX1~1.0IL")) returned 1 [0268.308] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.308] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpF7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQM1dGNjFTQlJZWFIyY201Z1ZHVnN1V052M1c4MTNt3GpZWFJwMzI175lFTnYzWEIyM241Z1UwRlBR7UFvVDI4MjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpf7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqm1dgnjftqljzwfiyy201z1zhvnn1v052m1c4mtnt3gpzwfjwmzi175lftnyzweiym241z1uwrlbr7ufvvdi4mjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0268.308] CloseHandle (hObject=0x204) returned 1 [0268.308] CloseHandle (hObject=0xffffffff) returned 1 [0268.308] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpF7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQM1dGNjFTQlJZWFIyY201Z1ZHVnN1V052M1c4MTNt3GpZWFJwMzI175lFTnYzWEIyM241Z1UwRlBR7UFvVDI4MjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpf7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqm1dgnjftqljzwfiyy201z1zhvnn1v052m1c4mtnt3gpzwfjwmzi175lftnyzweiym241z1uwrlbr7ufvvdi4mjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0268.309] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpF7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQM1dGNjFTQlJZWFIyY201Z1ZHVnN1V052M1c4MTNt3GpZWFJwMzI175lFTnYzWEIyM241Z1UwRlBR7UFvVDI4MjNp3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpf7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqm1dgnjftqljzwfiyy201z1zhvnn1v052m1c4mtnt3gpzwfjwmzi175lftnyzweiym241z1uwrlbr7ufvvdi4mjnp3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0xffffffff [0268.309] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c75e9f8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c75e9f8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c846164, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZEZX1~1.0IL")) returned 0x7d3018 [0268.309] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7c75e9f8, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7c75e9f8, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7c846164, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZEZX1~1.0IL")) returned 0 [0268.309] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0268.309] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0268.310] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzEzX19D3256ZWN01W96c19DZW4sdW42cl9P3WF61SBRYXR2cm5gVGVsZWNv3W113mljYXRp325zIENv3XB23n5gU0FPQyAoT2123ilf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzezx19d3256zwn01w96c19dzw4sdw42cl9p3wf61sbryxr2cm5gvgvszwnv3w113mljyxrp325zienv3xb23n5gu0fpqyaot2123ilf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0268.310] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd052, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cfdd052, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d1806f0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x7ca4d8, dwReserved1=0x0, cFileName="MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZFFX0~1.0IL")) returned 1 [0268.311] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.311] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVF0VFc51TFXNG4JRTB5VFNB31FYVnp5SEpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvf0vfc51tfxng4jrtb5vfnb31fyvnp5sepwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.311] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x370 [0268.312] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.312] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.408] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x370, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0268.409] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x380, lpOverlapped=0x0) returned 1 [0268.410] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.434] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.445] CloseHandle (hObject=0x204) returned 1 [0268.445] CloseHandle (hObject=0x1fc) returned 1 [0268.445] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVF0VFc51TFXNG4JRTB5VFNB31FYVnp5SEpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvf0vfc51tfxng4jrtb5vfnb31fyvnp5sepwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0268.446] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpGZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVF0VFc51TFXNG4JRTB5VFNB31FYVnp5SEpwWVNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpgzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvf0vfc51tfxng4jrtb5vfnb31fyvnp5sepwwvnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0268.446] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd052, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cfdd052, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d1806f0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZFFX0~1.0IL")) returned 0x7d2ad8 [0268.446] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cfdd052, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7cfdd052, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d1806f0, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZFFX0~1.0IL")) returned 0 [0268.446] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0268.446] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0268.448] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzFfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1QtTW9i1W4lIE0yTSAoQXVzdHJpYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzffx0nv3m5ly3rp325zx0nl3g413gfyx1qttw9i1w4lie0ytsaoqxvzdhjpyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0268.448] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fa03b4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84fa03b4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x851d5da2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG0X1~1.0IL")) returned 1 [0268.448] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.448] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.449] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0268.449] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.450] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.514] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0268.514] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0268.515] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.537] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.549] CloseHandle (hObject=0x1fc) returned 1 [0268.549] CloseHandle (hObject=0x204) returned 1 [0268.549] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0268.550] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0268.550] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fa03b4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84fa03b4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x851d5da2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG0X1~1.0IL")) returned 0x7d2b18 [0268.550] FindNextFileA (in: hFindFile=0x7d2b18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84fa03b4, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84fa03b4, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x851d5da2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG0X1~1.0IL")) returned 0 [0268.550] FindClose (in: hFindFile=0x7d2b18 | out: hFindFile=0x7d2b18) returned 1 [0268.550] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0268.552] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg0X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg0x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0268.552] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851d5da2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x851d5da2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8545ad99, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG1X1~1.0IL")) returned 1 [0268.552] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.552] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.553] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0268.553] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.553] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.619] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0268.619] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0268.620] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.644] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.657] CloseHandle (hObject=0x204) returned 1 [0268.657] CloseHandle (hObject=0x1fc) returned 1 [0268.657] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0268.658] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0268.658] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851d5da2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x851d5da2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8545ad99, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG1X1~1.0IL")) returned 0x7d2b58 [0268.658] FindNextFileA (in: hFindFile=0x7d2b58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x851d5da2, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x851d5da2, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x8545ad99, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG1X1~1.0IL")) returned 0 [0268.658] FindClose (in: hFindFile=0x7d2b58 | out: hFindFile=0x7d2b58) returned 1 [0268.658] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0268.660] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg1X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg1x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0268.660] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8545ad99, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8545ad99, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x856bd26b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG2X1~1.0IL")) returned 1 [0268.660] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.660] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI17UpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi17updmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.661] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0268.661] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.661] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.758] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0268.758] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0268.759] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.782] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.792] CloseHandle (hObject=0x1fc) returned 1 [0268.792] CloseHandle (hObject=0x204) returned 1 [0268.793] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI17UpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi17updmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0268.793] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI17UpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi17updmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0268.794] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8545ad99, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8545ad99, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x856bd26b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG2X1~1.0IL")) returned 0x7d2c18 [0268.794] FindNextFileA (in: hFindFile=0x7d2c18, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8545ad99, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x8545ad99, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x856bd26b, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG2X1~1.0IL")) returned 0 [0268.794] FindClose (in: hFindFile=0x7d2c18 | out: hFindFile=0x7d2c18) returned 1 [0268.794] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0268.795] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg2X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25yJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg2x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25yjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0268.795] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856bd26b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x856bd26b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x857ee55c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG3X1~1.0IL")) returned 1 [0268.796] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.796] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI175pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi175pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.797] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0268.797] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.797] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.870] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0268.870] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0268.871] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0268.893] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0268.904] CloseHandle (hObject=0x204) returned 1 [0268.905] CloseHandle (hObject=0x1fc) returned 1 [0268.905] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI175pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi175pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0268.906] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUMVc13mRHVnNJQzJUMVc13llYQnZj3VVwWDI175pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlumvc13mrhvnnjqzjumvc13llyqnzj3vvwwdi175pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0268.906] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856bd26b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x856bd26b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x857ee55c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG3X1~1.0IL")) returned 0x7d3018 [0268.906] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x856bd26b, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x856bd26b, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x857ee55c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG3X1~1.0IL")) returned 0 [0268.906] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0268.906] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0268.907] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg3X19D3256ZWN01W96c19DZW4sdW42cl9T1W5ndGVsIC2T1W5nYXBvcmUpX25zJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg3x19d3256zwn01w96c19dzw4sdw42cl9t1w5ndgvsic2t1w5nyxbvcmupx25zjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0268.908] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857ee55c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x857ee55c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x858f9460, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG4X1~2.0IL")) returned 1 [0268.908] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0268.908] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0268.909] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0268.909] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0268.909] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0268.974] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0268.974] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0268.975] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.046] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.057] CloseHandle (hObject=0x1fc) returned 1 [0269.057] CloseHandle (hObject=0x204) returned 1 [0269.058] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0269.058] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0269.058] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857ee55c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x857ee55c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x858f9460, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG4X1~2.0IL")) returned 0x7d2918 [0269.059] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x857ee55c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x857ee55c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x858f9460, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG4X1~2.0IL")) returned 0 [0269.059] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0269.059] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0269.060] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0269.060] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84747db5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84747db5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84bc06ba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZG4X1~1.0IL")) returned 1 [0269.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.061] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMV2BZ1RXOW54VzRsSUZKVElDMlR1WEppMVdFZ0tGSm4jSFZpM0ds15lHOW1LU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmv2bz1rxow54vzrssuzkveldmlr1weppmvdfz0tgsm4jsfzpm0ds15lhow1lu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0269.061] CloseHandle (hObject=0x204) returned 1 [0269.061] CloseHandle (hObject=0xffffffff) returned 1 [0269.061] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMV2BZ1RXOW54VzRsSUZKVElDMlR1WEppMVdFZ0tGSm4jSFZpM0ds15lHOW1LU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmv2bz1rxow54vzrssuzkveldmlr1weppmvdfz0tgsm4jsfzpm0ds15lhow1lu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0269.061] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlXMV2BZ1RXOW54VzRsSUZKVElDMlR1WEppMVdFZ0tGSm4jSFZpM0ds15lHOW1LU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlxmv2bz1rxow54vzrssuzkveldmlr1weppmvdfz0tgsm4jsfzpm0ds15lhow1lu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0xffffffff [0269.061] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84747db5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84747db5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84bc06ba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZG4X1~1.0IL")) returned 0x7d3018 [0269.061] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84747db5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84747db5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84bc06ba, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x330, dwReserved0=0x0, dwReserved1=0x77bb10f0, cFileName="Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZG4X1~1.0IL")) returned 0 [0269.061] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0269.062] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0269.063] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg4X19D3256ZWN01W96c19DZW4sdW42cl9W1XAgTW9i1W4lIFJTIC2TZXJi1WEgKFJlcHVi3GljIG9mKSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg4x19d3256zwn01w96c19dzw4sdw42cl9w1xagtw9i1w4lifjtic2tzxji1wegkfjlchvi3gljig9mkslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0269.063] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858f9460, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x858f9460, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x859de3ed, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x300056, dwReserved1=0x510046, cFileName="Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG5X1~1.0IL")) returned 1 [0269.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.064] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.064] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0269.064] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.065] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.132] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0269.132] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0269.133] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.155] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.166] CloseHandle (hObject=0x204) returned 1 [0269.166] CloseHandle (hObject=0x1fc) returned 1 [0269.166] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0269.167] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUZEdG7TFIVmlJQzJUMVc13llYQnZj3VVwWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dluzedg7tfivmljqzjumvc13llyqnzj3vvwwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0269.167] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858f9460, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x858f9460, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x859de3ed, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG5X1~1.0IL")) returned 0x7d2a98 [0269.167] FindNextFileA (in: hFindFile=0x7d2a98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x858f9460, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x858f9460, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x859de3ed, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZG5X1~1.0IL")) returned 0 [0269.167] FindClose (in: hFindFile=0x7d2a98 | out: hFindFile=0x7d2a98) returned 1 [0269.168] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0269.169] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\Mzg5X19D3256ZWN01W96c19DZW4sdW42cl9TdGFy1HViIC2T1W5nYXBvcmUpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzg5x19d3256zwn01w96c19dzw4sdw42cl9tdgfy1hviic2t1w5nyxbvcmupx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0269.170] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844da705, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x844da705, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84747db5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGWX1~1.0IL")) returned 1 [0269.171] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.171] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnd1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnd1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.172] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d0 [0269.172] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.172] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.237] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x1d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x1d0, lpOverlapped=0x0) returned 1 [0269.237] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x1e0, lpOverlapped=0x0) returned 1 [0269.238] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.262] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.273] CloseHandle (hObject=0x1fc) returned 1 [0269.273] CloseHandle (hObject=0x204) returned 1 [0269.273] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnd1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnd1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0269.274] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpnd1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRndjRW4FTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnd1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrndjrw4ftg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0269.274] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844da705, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x844da705, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84747db5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGWX1~1.0IL")) returned 0x7d3018 [0269.274] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x844da705, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x844da705, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84747db5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGWX1~1.0IL")) returned 0 [0269.274] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0269.274] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 1 [0269.276] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgwX19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FwcElELnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgwx19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fwcelelnby33z43ww9.0ilfzr")) returned 0xffffffff [0269.276] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bc06ba, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84bc06ba, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84d3dd9a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGYX1~1.0IL")) returned 1 [0269.276] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.276] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHVlAz3VVnS0ZOcDNtZDJjRzl5WlNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhvlaz3vvns0zocdntzdjjrzl5wlnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.277] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0269.277] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.277] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.373] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0269.374] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0269.375] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.397] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.409] CloseHandle (hObject=0x204) returned 1 [0269.409] CloseHandle (hObject=0x1fc) returned 1 [0269.409] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHVlAz3VVnS0ZOcDNtZDJjRzl5WlNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhvlaz3vvns0zocdntzdjjrzl5wlnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0269.410] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpn7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHVlAz3VVnS0ZOcDNtZDJjRzl5WlNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpn7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhvlaz3vvns0zocdntzdjjrzl5wlnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0269.410] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bc06ba, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84bc06ba, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84d3dd9a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGYX1~1.0IL")) returned 0x7d3098 [0269.410] FindNextFileA (in: hFindFile=0x7d3098, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84bc06ba, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84bc06ba, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84d3dd9a, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGYX1~1.0IL")) returned 0 [0269.410] FindClose (in: hFindFile=0x7d3098 | out: hFindFile=0x7d3098) returned 1 [0269.410] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0269.412] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgyX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgyx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0269.412] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d8a2e0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84d8a2e0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84fa03b4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGZX1~1.0IL")) returned 1 [0269.412] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.412] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHVlAz3VVnS0ZOcDNtZDJjRzl5WlNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhvlaz3vvns0zocdntzdjjrzl5wlnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.413] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0269.413] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.413] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.498] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0269.498] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0269.499] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.523] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.534] CloseHandle (hObject=0x1fc) returned 1 [0269.534] CloseHandle (hObject=0x204) returned 1 [0269.535] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHVlAz3VVnS0ZOcDNtZDJjRzl5WlNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhvlaz3vvns0zocdntzdjjrzl5wlnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0269.535] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpn7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlOMzJKcDNHVlAz3VVnS0ZOcDNtZDJjRzl5WlNsZjFURTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpn7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlomzjkcdnhvlaz3vvns0zocdntzdjjrzl5wlnszjfurtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0269.536] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d8a2e0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84d8a2e0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84fa03b4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGZX1~1.0IL")) returned 0x7d2ad8 [0269.536] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d8a2e0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x84d8a2e0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x84fa03b4, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZGZX1~1.0IL")) returned 0 [0269.536] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0269.536] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0269.537] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzgzX19D3256ZWN01W96c19DZW4sdW42cl9N32Jp3GVP3mUgKFNp3md2cG9yZSlf1TE5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzgzx19d3256zwn01w96c19dzw4sdw42cl9n32jp3gvp3mugkfnp3md2cg9yzslf1te5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0269.537] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d703e23, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d703e23, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d8f96e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZI0X1~1.0IL")) returned 1 [0269.538] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.538] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yVnNJQzJRWV2KMlozVjI3U24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yvnnjqzjrwv2kmlozvji3u24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.539] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0269.539] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.539] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.611] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0269.611] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0269.612] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.635] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.646] CloseHandle (hObject=0x204) returned 1 [0269.646] CloseHandle (hObject=0x1fc) returned 1 [0269.646] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yVnNJQzJRWV2KMlozVjI3U24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yvnnjqzjrwv2kmlozvji3u24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0269.647] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03F5yVnNJQzJRWV2KMlozVjI3U24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03f5yvnnjqzjrwv2kmlozvji3u24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0269.647] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d703e23, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d703e23, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d8f96e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZI0X1~1.0IL")) returned 0x7d3018 [0269.647] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d703e23, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d703e23, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d8f96e2, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZI0X1~1.0IL")) returned 0 [0269.647] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0269.647] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0269.649] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI0X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lY2VsIC2QYXJ2Z3V27Slf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi0x19d3256zwn01w96c19dzw4sdw42cl9uzw4ly2vsic2qyxj2z3v27slf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0269.649] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d94016c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d94016c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dabd925, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZI1X1~1.0IL")) returned 1 [0269.649] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.649] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR1Z5ZFNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr1z5zfnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.650] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0269.650] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.650] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.728] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0269.728] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0269.730] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.755] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.766] CloseHandle (hObject=0x1fc) returned 1 [0269.766] CloseHandle (hObject=0x204) returned 1 [0269.767] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR1Z5ZFNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr1z5zfnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0 [0269.768] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR1Z5ZFNsZjFUQTVLRjlmVFZ1SlJD3EFWMEZRTG5C7TMzWjQzV3c5LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr1z5zfnszjfuqtvlrjlmvfz1sljd3efwmezrtg5c7tmzwjqzv3c5ljbp3gz6cg99.0ilfzr")) returned 0x20 [0269.768] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d94016c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d94016c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dabd925, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZI1X1~1.0IL")) returned 0x7d3018 [0269.768] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d94016c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d94016c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dabd925, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZI1X1~1.0IL")) returned 0 [0269.768] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0269.768] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0269.769] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI1X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGVydSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi1x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougvydslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0269.770] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dae3b79, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dae3b79, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dc3b16c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZI2X1~1.0IL")) returned 1 [0269.770] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.770] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyUVpYSjFLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyuvpysjflvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.774] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0269.774] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.774] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0269.883] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0269.883] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0269.884] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0269.908] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0269.919] CloseHandle (hObject=0x204) returned 1 [0269.919] CloseHandle (hObject=0x1fc) returned 1 [0269.919] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyUVpYSjFLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyuvpysjflvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0 [0269.920] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyUVpYSjFLVjlwTUNR31g4OU5WNW4FS1VCWFFWQTZjSEp2ZG4ydDNBOT56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyuvpysjflvjlwtunr31g4ou5wnw4fs1vcwffwqtzjsep2zg4yddnbot56mglsznpy.0ilfzr")) returned 0x20 [0269.920] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dae3b79, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dae3b79, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dc3b16c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZI2X1~1.0IL")) returned 0x7d3018 [0269.921] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dae3b79, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dae3b79, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dc3b16c, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZI2X1~1.0IL")) returned 0 [0269.921] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0269.921] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0269.922] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI2X19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QZXJ1KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi2x19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qzxj1kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0269.922] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc3b16c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dc3b16c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dd925e5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI3X1~1.0IL")) returned 1 [0269.923] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0269.923] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM0c51VpTQW9VRzJwM0dsd2NH3DZ1WE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim0c51vptqw9vrzjwm0dsd2nh3dz1we1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0269.924] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0269.924] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0269.924] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.024] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0270.025] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0270.026] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.048] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.058] CloseHandle (hObject=0x1fc) returned 1 [0270.059] CloseHandle (hObject=0x204) returned 1 [0270.059] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM0c51VpTQW9VRzJwM0dsd2NH3DZ1WE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim0c51vptqw9vrzjwm0dsd2nh3dz1we1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0270.061] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJM1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM0c51VpTQW9VRzJwM0dsd2NH3DZ1WE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjm1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim0c51vptqw9vrzjwm0dsd2nh3dz1we1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0270.061] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc3b16c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dc3b16c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dd925e5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI3X1~1.0IL")) returned 0x7d29d8 [0270.061] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dc3b16c, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dc3b16c, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dd925e5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI3X1~1.0IL")) returned 0 [0270.061] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0270.061] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0270.063] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI3X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi3x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0270.063] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d28b84d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d28b84d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d3705ad, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZI4X1~1.0IL")) returned 1 [0270.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.063] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR0Y2WVc4M5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr0y2wvc4m5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.064] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0270.064] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.064] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.183] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2c0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2c0, lpOverlapped=0x0) returned 1 [0270.183] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2d0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0270.184] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.209] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.220] CloseHandle (hObject=0x204) returned 1 [0270.220] CloseHandle (hObject=0x1fc) returned 1 [0270.220] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR0Y2WVc4M5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr0y2wvc4m5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0270.221] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR0Y2WVc4M5tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr0y2wvc4m5twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0270.221] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d28b84d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d28b84d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d3705ad, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZI4X1~1.0IL")) returned 0x7d2ad8 [0270.221] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d28b84d, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d28b84d, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d3705ad, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZI4X1~1.0IL")) returned 0 [0270.221] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0270.221] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0270.223] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGF6YW12KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougf6yw12kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0270.223] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd925e5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dd925e5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dff4db7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI4X1~2.0IL")) returned 1 [0270.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.223] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM0c51VpTQW9VRzJwM0dsd2NH3DZ1WE1wWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim0c51vptqw9vrzjwm0dsd2nh3dz1we1wwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.224] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0270.224] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.225] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.290] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2a0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0270.290] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2b0, lpOverlapped=0x0) returned 1 [0270.291] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.315] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.326] CloseHandle (hObject=0x1fc) returned 1 [0270.326] CloseHandle (hObject=0x204) returned 1 [0270.326] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM0c51VpTQW9VRzJwM0dsd2NH3DZ1WE1wWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim0c51vptqw9vrzjwm0dsd2nh3dz1we1wwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0270.327] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlIM0c51VpTQW9VRzJwM0dsd2NH3DZ1WE1wWDI1NEpDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlim0c51vptqw9vrzjwm0dsd2nh3dz1we1wwdi1nepdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0270.327] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd925e5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dd925e5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dff4db7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI4X1~2.0IL")) returned 0x7d3018 [0270.327] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dd925e5, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dd925e5, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7dff4db7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI4X1~2.0IL")) returned 0 [0270.327] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0270.327] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0270.329] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI4X19D3256ZWN01W96c19DZW4sdW42cl9H3G9iZSAoUG2p3GlwcGl6ZXMpX254JC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi4x19d3256zwn01w96c19dzw4sdw42cl9h3g9izsaoug2p3glwcgl6zxmpx254jc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0270.329] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dff4db7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dff4db7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7e1be7b7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI5X1~1.0IL")) returned 1 [0270.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.329] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7WRDQW9VRzJwM0dsd2NH3DZ1WE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7wrdqw9vrzjwm0dsd2nh3dz1we1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.330] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x290 [0270.330] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.330] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.425] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x290, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x290, lpOverlapped=0x0) returned 1 [0270.425] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2a0, lpOverlapped=0x0) returned 1 [0270.426] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.450] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.461] CloseHandle (hObject=0x204) returned 1 [0270.461] CloseHandle (hObject=0x1fc) returned 1 [0270.461] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7WRDQW9VRzJwM0dsd2NH3DZ1WE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7wrdqw9vrzjwm0dsd2nh3dz1we1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0270.462] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJNVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlUM1dG7WRDQW9VRzJwM0dsd2NH3DZ1WE1wWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjnvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlum1dg7wrdqw9vrzjwm0dsd2nh3dz1we1wwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0270.462] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dff4db7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dff4db7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7e1be7b7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI5X1~1.0IL")) returned 0x7d2ad8 [0270.462] FindNextFileA (in: hFindFile=0x7d2ad8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7dff4db7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7dff4db7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7e1be7b7, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZI5X1~1.0IL")) returned 0 [0270.462] FindClose (in: hFindFile=0x7d2ad8 | out: hFindFile=0x7d2ad8) returned 1 [0270.462] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0270.464] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzI5X19D3256ZWN01W96c19DZW4sdW42cl9T3WFydCAoUG2p3GlwcGl6ZXMpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzi5x19d3256zwn01w96c19dzw4sdw42cl9t3wfydcaoug2p3glwcgl6zxmpx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0270.464] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1806f0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d1806f0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d2655a9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZIWX1~1.0IL")) returned 1 [0270.464] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.465] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWVdKc1pTQjIz3VFnVjJs7VpXNG4jM01nS0ZCMjNtRnRZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewvdkc1ptqjiz3vfnvjjs7vpxng4jm01ns0zcmjntrnrzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.465] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0270.465] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.466] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.525] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0270.525] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0270.526] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.552] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.563] CloseHandle (hObject=0x1fc) returned 1 [0270.563] CloseHandle (hObject=0x204) returned 1 [0270.563] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWVdKc1pTQjIz3VFnVjJs7VpXNG4jM01nS0ZCMjNtRnRZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewvdkc1ptqjiz3vfnvjjs7vpxng4jm01ns0zcmjntrnrzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0270.564] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJd1g4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEWVdKc1pTQjIz3VFnVjJs7VpXNG4jM01nS0ZCMjNtRnRZU24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpjd1g4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlewvdkc1ptqjiz3vfnvjjs7vpxng4jm01ns0zcmjntrnrzu24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0270.564] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1806f0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d1806f0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d2655a9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZIWX1~1.0IL")) returned 0x7d3018 [0270.564] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d1806f0, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d1806f0, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d2655a9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZIWX1~1.0IL")) returned 0 [0270.565] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0270.565] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0270.566] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIwX19D3256ZWN01W96c19DZW4sdW42cl9DYWJsZSB23mQgV2lyZW4lc3MgKFB23mFtYSlf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziwx19d3256zwn01w96c19dzw4sdw42cl9dywjszsb23mqgv2lyzw4lc3mgkfb23mftyslf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0270.566] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3705ad, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d3705ad, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d4a1864, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7c4638, dwReserved1=0x0, cFileName="MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZIYX1~1.0IL")) returned 1 [0270.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.567] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyUVlXNTIzV0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyuvlxntizv0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.567] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0270.568] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.568] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.633] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0270.633] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0270.634] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.657] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.667] CloseHandle (hObject=0x204) returned 1 [0270.667] CloseHandle (hObject=0x1fc) returned 1 [0270.668] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyUVlXNTIzV0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyuvlxntizv0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0 [0270.669] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJ7Vg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVWlc03FptOTY4V04ySUMyUVlXNTIzV0VwWDI1d0pDMmZYMDFXU1VRcFFGZEJVQzV3Y205MjdHMXM6MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7vg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvwlc03fptoty4v04ysumyuvlxntizv0vwwdi1d0pdmmzymdfxu1vrcffgzejvqzv3y205mjdhmxm6mglsznpy.0ilfzr")) returned 0x20 [0270.669] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3705ad, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d3705ad, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d4a1864, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZIYX1~1.0IL")) returned 0x7d2918 [0270.669] FindNextFileA (in: hFindFile=0x7d2918, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d3705ad, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d3705ad, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d4a1864, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZIYX1~1.0IL")) returned 0 [0270.670] FindClose (in: hFindFile=0x7d2918 | out: hFindFile=0x7d2918) returned 1 [0270.670] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0270.671] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIyX19D3256ZWN01W96c19DZW4sdW42cl9UZW4lZm961WN2IC2QYW523WEpX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mziyx19d3256zwn01w96c19dzw4sdw42cl9uzw4lzm961wn2ic2qyw523wepx25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0270.671] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4a1864, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d4a1864, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d703e23, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZIZX1~1.0IL")) returned 1 [0270.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.672] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR0Z5WVd5MVlYNXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr0z5wvd5mvlynxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.673] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0270.673] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.673] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.771] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0270.771] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0270.772] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.800] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.813] CloseHandle (hObject=0x1fc) returned 1 [0270.813] CloseHandle (hObject=0x204) returned 1 [0270.813] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR0Z5WVd5MVlYNXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr0z5wvd5mvlynxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0 [0270.814] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpJ7lg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlEM0dG7TN5QW9VR0Z5WVd5MVlYNXBYMjV3S5MyZlgwMVdTVVFwUUZ5QlVDNXdj3T5yN0c4cy4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpj7lg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlem0dg7tn5qw9vr0z5wvd5mvlynxbymjv3s5myzlgwmvdtvvfwuuz5qlvdnxdj3t5yn0c4cy4w1w4m7ni9.0ilfzr")) returned 0x20 [0270.814] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4a1864, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d4a1864, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d703e23, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZIZX1~1.0IL")) returned 0x7d3018 [0270.815] FindNextFileA (in: hFindFile=0x7d3018, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d4a1864, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7d4a1864, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7d703e23, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr", cAlternateFileName="MZIZX1~1.0IL")) returned 0 [0270.815] FindClose (in: hFindFile=0x7d3018 | out: hFindFile=0x7d3018) returned 1 [0270.815] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 1 [0270.816] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzIzX19D3256ZWN01W96c19DZW4sdW42cl9D3GFy3yAoUGFyYWd1YX5pX25wJC2fX01WSUQpQFdBUC5wcm927G1s.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzizx19d3256zwn01w96c19dzw4sdw42cl9d3gfy3yaougfyywd1yx5px25wjc2fx01wsuqpqfdbuc5wcm927g1s.0ilfzr")) returned 0xffffffff [0270.816] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1be7b7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7e1be7b7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7e446ff5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZJFX0~1.0IL")) returned 1 [0270.816] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.817] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEY2Wl2K1lpXNHNJQzJCN21W7VltRnA43UY2S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymey2wl2k1lpxnhnjqzjcn21w7vltrna43uy2s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.817] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e0 [0270.817] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.818] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0270.890] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2e0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0270.890] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2f0, lpOverlapped=0x0) returned 1 [0270.891] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0270.913] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0270.924] CloseHandle (hObject=0x204) returned 1 [0270.924] CloseHandle (hObject=0x1fc) returned 1 [0270.925] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEY2Wl2K1lpXNHNJQzJCN21W7VltRnA43UY2S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymey2wl2k1lpxnhnjqzjcn21w7vltrna43uy2s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0 [0270.925] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpKZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMEY2Wl2K1lpXNHNJQzJCN21W7VltRnA43UY2S1Y5cE1DUW9YMTlOVjVsRUtVQl2RV5E2Y02KdmR6MnQzQT55LjBp3GZ6cg99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpkzlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymey2wl2k1lpxnhnjqzjcn21w7vltrna43uy2s1y5ce1duw9ymtlovjvsrutvql2rv5e2y02kdmr6mnqzqt55ljbp3gz6cg99.0ilfzr")) returned 0x20 [0270.926] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1be7b7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7e1be7b7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7e446ff5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZJFX0~1.0IL")) returned 0x7d2cd8 [0270.926] FindNextFileA (in: hFindFile=0x7d2cd8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7e1be7b7, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7e1be7b7, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7e446ff5, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZJFX0~1.0IL")) returned 0 [0270.926] FindClose (in: hFindFile=0x7d2cd8 | out: hFindFile=0x7d2cd8) returned 1 [0270.926] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0270.927] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzJfX0Nv3m5lY3Rp325zX0Nl3G413GFyX0F6ZXJjZW4sIC2B7mVyYmFp1mF6KV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzjfx0nv3m5ly3rp325zx0nl3g413gfyx0f6zxjjzw4sic2b7mvyymfp1mf6kv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0270.927] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b4d761, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86b4d761, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86cf1153, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZLFX0~1.0IL")) returned 1 [0270.928] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0270.928] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpsZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVpGVEVOUFRTQW9R3VZzWV2KMWN53GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvpgvevoufrtqw9r3vzzwv2kmwn53gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0270.928] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x360 [0270.929] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0270.929] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0271.035] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x360, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x360, lpOverlapped=0x0) returned 1 [0271.035] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x370, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x370, lpOverlapped=0x0) returned 1 [0271.036] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0271.059] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.071] CloseHandle (hObject=0x1fc) returned 1 [0271.071] CloseHandle (hObject=0x204) returned 1 [0271.071] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpsZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVpGVEVOUFRTQW9R3VZzWV2KMWN53GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvpgvevoufrtqw9r3vzzwv2kmwn53gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0271.072] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpsZlgwTnYz3TVsWTNScDMyNXpYME5sM0c0MTNHRnlYMVpGVEVOUFRTQW9R3VZzWV2KMWN53GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpszlgwtnyz3tvswtnscdmynxpyme5sm0c0mtnhrnlymvpgvevoufrtqw9r3vzzwv2kmwn53gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0271.072] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b4d761, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86b4d761, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86cf1153, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZLFX0~1.0IL")) returned 0x7d2998 [0271.072] FindNextFileA (in: hFindFile=0x7d2998, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b4d761, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x86b4d761, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x86cf1153, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZLFX0~1.0IL")) returned 0 [0271.072] FindClose (in: hFindFile=0x7d2998 | out: hFindFile=0x7d2998) returned 1 [0271.072] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0271.074] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzlfX0Nv3m5lY3Rp325zX0Nl3G413GFyX1ZFTENPTSAoQmVsYXJ1cylf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzlfx0nv3m5ly3rp325zx0nl3g413gfyx1zftenptsaoqmvsyxj1cylf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0271.074] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb2d326, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7eb2d326, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ecf6df9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM0X1~1.0IL")) returned 1 [0271.074] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0271.074] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JRMzI0MjNtUWdLR5J2M0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jrmzi0mjntuwdlr5j2m0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0271.075] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0271.075] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0271.075] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0271.140] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0271.140] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0271.141] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0271.167] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.177] CloseHandle (hObject=0x204) returned 1 [0271.178] CloseHandle (hObject=0x1fc) returned 1 [0271.178] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JRMzI0MjNtUWdLR5J2M0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jrmzi0mjntuwdlr5j2m0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0 [0271.179] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMFg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVTFU4dllt3HN1U0JRMzI0MjNtUWdLR5J2M0dGNlpD3GY4VEE1S0Y5ZlRWW5pSQ24BVjBGUU46Qn5zM1o0M1d3OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmfg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvtfu4dllt3hn1u0jrmzi0mjntuwdlr5j2m0dgnlpd3gy4vee1s0y5zlrww5psq24bvjbguu46qn5zm1o0m1d3os4w1w4m7ni9.0ilfzr")) returned 0x20 [0271.179] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb2d326, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7eb2d326, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ecf6df9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM0X1~1.0IL")) returned 0x7d29d8 [0271.179] FindNextFileA (in: hFindFile=0x7d29d8, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eb2d326, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7eb2d326, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7ecf6df9, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM0X1~1.0IL")) returned 0 [0271.179] FindClose (in: hFindFile=0x7d29d8 | out: hFindFile=0x7d29d8) returned 1 [0271.179] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0271.180] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM0X19D3256ZWN01W96c19DZW4sdW42cl9ULU1vYmlsZSBQ32423mQgKFBv3GF6ZClf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm0x19d3256zwn01w96c19dzw4sdw42cl9ulu1vymlszsbq32423mqgkfbv3gf6zclf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0271.181] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecf6df9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ecf6df9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7efcbbf3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM1X1~1.0IL")) returned 1 [0271.181] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0271.181] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY02ScDNYVnpJQzJRMzNKMGRXZDIzQ24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy02scdnyvnpjqzjrmznkmgrxzdizq24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0271.182] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0271.182] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0271.182] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0271.249] ReadFile (in: hFile=0x1fc, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0271.249] WriteFile (in: hFile=0x204, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0271.251] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0271.273] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.285] CloseHandle (hObject=0x1fc) returned 1 [0271.285] CloseHandle (hObject=0x204) returned 1 [0271.285] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY02ScDNYVnpJQzJRMzNKMGRXZDIzQ24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy02scdnyvnpjqzjrmznkmgrxzdizq24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0 [0271.286] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMVg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlQY02ScDNYVnpJQzJRMzNKMGRXZDIzQ24mMVRBNUtGOWZUVlpKU5NsQVYwRlFM35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmvg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlqy02scdnyvnpjqzjrmznkmgrxzdizq24mmvrbnutgowzuvlpku5nsqvywrlfm35j5mzn1ndnxdz56mglsznpy.0ilfzr")) returned 0x20 [0271.286] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecf6df9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ecf6df9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7efcbbf3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM1X1~1.0IL")) returned 0x7d2c98 [0271.287] FindNextFileA (in: hFindFile=0x7d2c98, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ecf6df9, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7ecf6df9, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7efcbbf3, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM1X1~1.0IL")) returned 0 [0271.287] FindClose (in: hFindFile=0x7d2c98 | out: hFindFile=0x7d2c98) returned 1 [0271.287] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 1 [0271.288] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM1X19D3256ZWN01W96c19DZW4sdW42cl9PcHRp3XVzIC2Q33J0dWd23Clf1TA5KF9fTVZJRClAV0FQLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm1x19d3256zwn01w96c19dzw4sdw42cl9pchrp3xvzic2q33j0dwd23clf1ta5kf9ftvzjrclav0fqlnby33z43ww9.0ilfzr")) returned 0xffffffff [0271.288] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7efcbbf3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7efcbbf3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7f220729, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x7c04a0, dwReserved1=0x0, cFileName="MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZM2X1~1.0IL")) returned 1 [0271.289] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0271.289] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVVFU0Z0tGQnZj3lI4WjJGc0tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvvfu0z0tgqnzj3li4wjjgc0twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0271.289] GetFileSize (in: hFile=0x204, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d0 [0271.290] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0271.290] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 [0271.459] ReadFile (in: hFile=0x204, lpBuffer=0x238000e, nNumberOfBytesToRead=0x2d0, lpNumberOfBytesRead=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000e*, lpNumberOfBytesRead=0x19eaf4*=0x2d0, lpOverlapped=0x0) returned 1 [0271.459] WriteFile (in: hFile=0x1fc, lpBuffer=0x238000c*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x19eaf4, lpOverlapped=0x0 | out: lpBuffer=0x238000c*, lpNumberOfBytesWritten=0x19eaf4*=0x2e0, lpOverlapped=0x0) returned 1 [0271.460] VirtualFree (lpAddress=0x2380000, dwSize=0x504000, dwFreeType=0x4000) returned 1 [0271.484] VirtualFree (lpAddress=0x2380000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0271.495] CloseHandle (hObject=0x204) returned 1 [0271.495] CloseHandle (hObject=0x1fc) returned 1 [0271.496] MoveFileA (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVVFU0Z0tGQnZj3lI4WjJGc0tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvvfu0z0tgqnzj3li4wjjgc0twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0 [0271.497] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNMlg4OUQzMjU2WldOMDFXOTZjMTlEWlc0c2RXNDJj3DlVVFU0Z0tGQnZj3lI4WjJGc0tWOXBNQ1FvWDE5TlY13EVLVUJYUVZBNmNISnZ53jJ0M0E5OS4w1W4m7nI9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnmlg4ouqzmju2wldomdfxotzjmtlewlc0c2rxndjj3dlvvfu0z0tgqnzj3li4wjjgc0twoxbnq1fvwde5tly13evlvujyuvzbnmnisnz53jj0m0e5os4w1w4m7ni9.0ilfzr")) returned 0x20 [0271.497] FindFirstFileA (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7efcbbf3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7efcbbf3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7f220729, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZM2X1~1.0IL")) returned 0x7d2c58 [0271.497] FindNextFileA (in: hFindFile=0x7d2c58, lpFindFileData=0x19e9f0 | out: lpFindFileData=0x19e9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7efcbbf3, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7efcbbf3, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7f220729, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x7c0260, cFileName="MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr", cAlternateFileName="MZM2X1~1.0IL")) returned 0 [0271.497] FindClose (in: hFindFile=0x7d2c58 | out: hFindFile=0x7d2c58) returned 1 [0271.497] DeleteFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 1 [0271.498] GetFileAttributesA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM2X19D3256ZWN01W96c19DZW4sdW42cl9UTU4gKFBvcnR1Z2FsKV9pMCQoX19NV5lEKUBXQVA6cHJvdn2t3A99.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm2x19d3256zwn01w96c19dzw4sdw42cl9utu4gkfbvcnr1z2fskv9pmcqox19nv5lekubxqva6chjvdn2t3a99.0ilfzr")) returned 0xffffffff [0271.498] FindNextFileA (in: hFindFile=0x7d2958, lpFindFileData=0x19ed7c | out: lpFindFileData=0x19ed7c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f220729, ftCreationTime.dwHighDateTime=0x1d5c374, ftLastAccessTime.dwLowDateTime=0x7f220729, ftLastAccessTime.dwHighDateTime=0x1d5c374, ftLastWriteTime.dwLowDateTime=0x7f45cb31, ftLastWriteTime.dwHighDateTime=0x1d5c374, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x7caa48, dwReserved1=0x0, cFileName="MzM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr", cAlternateFileName="MZM3X1~1.0IL")) returned 1 [0271.499] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\MzM3X19DZW4sdW42cl9QZXJT1W1TZXR01W5nc185KF9fSUNDSUQpX0FjY2913nRF7HBlcmll3mNlVVJMLnBy33Z43Ww9.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\mzm3x19dzw4sdw42cl9qzxjt1w1tzxr01w5nc185kf9fsundsuqpx0fjy2913nrf7hblcmll3mnlvvjmlnby33z43ww9.0ilfzr"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1fc [0271.499] CreateFileA (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\TXpNM1g4OUR1VzRzZFc0MmNsOVF1WEpUMVc4VFpYUjA4VzV6YzE4NUtGOWZTVU5EU1VRcFgwRmpZMj54M25SRjdIQm4j3W4sM21O3FZWS51M35J5MzN1NDNXdz56MGlsZnpy.0ilfzr" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\txpnm1g4our1vzrzzfc0mmnsovf1wepumvc4vfpyuja4vzv6yze4nutgowztvu5eu1vrcfgwrmpzmj54m25srjdiqm4j3w4sm21o3fzws51m35j5mzn1ndnxdz56mglsznpy.0ilfzr"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x204 [0271.500] GetFileSize (in: hFile=0x1fc, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d0 [0271.500] VirtualAlloc (lpAddress=0x0, dwSize=0x510000, flAllocationType=0x2000, flProtect=0x1) returned 0x2380000 [0271.500] VirtualAlloc (lpAddress=0x2380000, dwSize=0x504000, flAllocationType=0x1000, flProtect=0x4) returned 0x2380000 Thread: id = 6 os_tid = 0x7fc